CERT Lead

The Role

This position leads a Computer Emergency Response Team through all phases of the incident response lifecycle, serving as the senior technical escalation point for high-profile cybersecurity incidents across city agencies. Day-to-day responsibilities span malware analysis, digital forensics, threat hunting, and coordinating response activities with government and private partners.

Skills & Experience

The role requires strong expertise in digital forensics and incident response, including malware analysis, campaign assessment, and threat hunting. Candidates should be comfortable working across identification, containment, and eradication phases, and collaborating with cyber threat intelligence and data science teams to improve detection and remediation capabilities.

Who It Suits

This position suits an experienced DFIR professional ready to operate at a senior level within a large, complex public-sector environment. Those who thrive coordinating across multiple stakeholders, including state and federal partners, and who are motivated by protecting critical government infrastructure serving millions of people will find this role compelling.