My client is a global risk management and intelligence services firm. They are looking for a DFIR (Digital Forensics & Incident Response) Managing Director to drive incident response engagements, oversee forensic investigations, lead a team of DFIR professionals, and provide strategic direction to improve the organizations' cybersecurity posture.
Responsibilities
- Lead and manage the DFIR practice, overseeing incident response engagements, digital forensic investigations, and proactive threat hunting.
- Develop and implement DFIR strategies, frameworks, and playbooks to enhance incident response capabilities.
- Manage and mentor a team of DFIR professionals, providing technical guidance and career development support.
- Act as a senior advisor to clients during cyber incidents, offering leadership and strategic recommendations for mitigation and remediation.
- Oversee the collection, preservation, and analysis of digital evidence from various sources, ensuring compliance with legal and regulatory requirements.
Qualifications
- 10+ years of experience in Cyber DFIR, with at least 3 years in a leadership capacity.
- Strong technical expertise in digital forensics tools such as EnCase, FTK, Cellebrite, X-Ways, and others.
- Hands-on experience with EDR solutions, cybersecurity platforms, and cloud environments (e.g., Microsoft 365, G-Suite, AWS).
- Proficiency in handling various operating systems (Linux, Windows, Mac, iOS) and file systems (FAT, NTFS, EXT).
- Expert-level proficiency in data and log analysis using tools like SQL, Python, Splunk, Tableau, and Excel.
- Extensive experience in digital evidence collection and forensic analysis from diverse sources.
- Familiarity with threat hunting, malware analysis, and memory capture techniques.
- Strong understanding of regulatory requirements and legal considerations related to digital forensics.
Preferred Certifications
- Certified Computer Examiner (CCE)
- Certified Information Systems Security Professional (CISSP)
- GIAC Certified Incident Handler (GCIH)
- Certified Forensic Computer Examiner (CFCE)
- Other relevant certifications in DFIR or cybersecurity etc.
