Cyber Defense DFIR Manager
NorthMark Strategies
Dallas, TX
The Role
This role owns incident response and digital forensics within the cyber defense function, maintaining incident response plans and playbooks across multiple operating companies. It involves leading forensic investigations, running tabletop exercises, and serving as incident command for significant security incidents.
Skills & Experience
Requires hands-on DFIR expertise across host, network, cloud (AWS, Azure, Kubernetes), mobile and memory forensics, plus Microsoft 365/Entra investigations using Unified Audit Log, Purview eDiscovery and Graph API. Experience managing teams and maintaining multi-entity incident response programs is essential.
Who It Suits
Suited to an experienced DFIR practitioner ready to step into a managerial position, who enjoys building and maturing forensic programs, leading investigations, and mentoring a growing incident response team within a complex, diversified organization.
Typical advertised salary for Digital Forensics roles in United States: $92,000–$154,000 (median $122,000 — from 221 recent listings analysed by Forensic Focus).
Learn More/Apply