Cyber Defense Forensics Lead

The Role

This position leads a team of digital forensics analysts supporting insider threat operations and data loss prevention for a federal law enforcement agency. Day-to-day responsibilities include directing enterprise and endpoint forensic investigations across Windows, Linux, Mac, and cloud environments, managing investigation lifecycles, and overseeing a forensics laboratory.

Skills & Experience

Candidates must bring at least seven years of experience in digital forensics, incident response, and insider threat investigations, with a minimum of five years of hands-on work involving host and network monitoring, SIEM platforms, endpoint detection tools, DLP solutions, and forensic tooling. Evidence handling, chain of custody, and malware analysis expertise are essential.

Who It Suits

This role suits an experienced forensics professional who is equally comfortable leading a technical team and conducting complex investigations independently. Someone with a federal or law enforcement background and the ability to communicate findings clearly through formal reports, dashboards, and workflow documentation will thrive here.