Senior Incident Response Analyst (Tier 3) – DFIR Lead

Forensic Focus Limited; Virginia, Northern (IL, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Forensic Focus Limited is seeking a senior DFIR professional to manage government contract incidents from detection through resolution. You will perform memory and file system forensics, packet capture analysis, and log review in a highly secure environment.

The role requires DoD 8570 IAT II and CSSP Incident Responder certifications (or ability to obtain within 180 days), plus an active TS/SCI clearance; Secret clearance holders may start.

Qualifications

• Minimum 3 years of incident response experience.
• DoD 8570 IAT Level II certification is required.
• CSSP Incident Responder certification or ability to obtain within 180 days.

Responsibilities

• Lead end-to-end cyber incident management from detection to resolution.
• Perform forensic analysis of memory, file systems, and network captures; review logs and hosts.
• Contribute to training development and mentor junior analysts in a classified government environment.

Skills

Incident Response

Forensic Analysis

DFIR Tools

Network Analysis

Mentoring/Leadership

Education

DoD 8570 IAT Level II

CSSP Incident Responder

Active TS/SCI Clearance

Job description

Forensic Focus Limited is seeking a senior DFIR professional to manage government contract incidents from detection through resolution. You will perform memory and file system forensics, packet capture analysis, and log review in a highly secure environment.

The role requires DoD 8570 IAT II and CSSP Incident Responder certifications (or ability to obtain within 180 days), plus an active TS/SCI clearance; Secret clearance holders may start.