Incident Commander, DFIR

Job Summary

Leading high-impact cyber investigations, the full-time Incident Commander, DFIR will manage complex security incidents remotely, advising executives and stakeholders while guiding organizations through initial response, investigation, containment, and recovery.

Key responsibilities

• Act as incident commander for complex DFIR engagements from start to finish
• Serve as the primary client lead, providing guidance to executives, legal counsel, and stakeholders
• Perform and direct forensic analysis across various environments, translating findings into business risk and remediation guidance

Required qualifications

• 3-5 years of hands-on DFIR experience in real-world incidents
• 6-10 years in client-facing consulting or incident response roles
• Proven experience as an incident commander or senior DFIR lead
• Strong background in ransomware and complex attack investigations
• Bachelor's degree preferred in Cybersecurity, Computer Science, DFIR, or a related field, or equivalent professional experience