Overview
A leading tech-enabled digital intelligence, investigation, and risk advisory firm is seeking a Director, Digital Forensics and Incident Response (DFIR) to join its New York offices.
The firm is seeking a dynamic, experienced new team member to help grow its Digital Forensics & Incident Response (DFIR) services. The firm has built a world class DFIR capability over the past several years and is looking to hire an Associate Director or Director with experience from the public and/or private sector to build on its success and help it innovate.
Key Responsibilities
- Managing DFIR projects, including coordinating between clients and team members, briefing, and ensuring projects are completed efficiently, within scope, and to the highest standards of quality.
- Providing technical expertise on complex cases, guiding teams through investigation, collection, analysis, and reporting of digital evidence.
- Innovating and staying at the forefront of industry trends, tools, and methodologies.
- Leading and mentoring a team of DFIR professionals, including oversight of hiring, training, and fostering a collaborative, entrepreneurial culture.
- Managing response efforts during cybersecurity incidents, working with clients to develop effective strategies for containment, mitigation, and recovery.
- Ensuring the timely and thorough documentation of findings, maintaining chain of custody, and delivering comprehensive, actionable reports to clients.
- Working closely with other teams (e.g., legal, compliance, cybersecurity) to provide integrated investigative services.
Key Competencies
- Candidates will have approximately six (6) to ten (10) years of experience in digital forensics, incident response, or a related field. They must have a proven track record of leading successful DFIR engagements from start to finish.
- Strong technical background in digital forensics tools (e.g., Magnet Axiom, EnCase, FTK, Cellebrite, XWays, etc.) and incident response, EDR, and cybersecurity platforms, as well as cloud-based environments (M365, G-Suite, AWS, etc.).
- Proficiency in handling a variety of operating systems (e.g., Linux, Windows, Mac, iOS, virtual machines, etc.) and file systems (e.g., FAT, NTFS, EXT, etc.). Must be familiar with digital evidence collection from a variety of sources.
- Expert-level proficiency in data and log file analysis and analytics tools such as SQL, Python, Tableau, Splunk, and Excel.
- Candidates must have exceptional leadership, communication, analytical, and interpersonal skills. They must have the ability to lead teams, build client trust, and provide strategic direction for the practice.
Desirable
- Certified Computer Examiner (CCE)
- Certified Information Systems Security Professional (CISSP)
- Certified Incident Handler (GCIH)
- Certified Forensic Computer Examiner (CFCE)
- Other relevant certifications in DFIR or cybersecurity.
