Senior Director, Digital Forensics and Incident Response

The Role

This senior leadership position involves commanding complex cyber investigations end-to-end, from initial response through containment and recovery. Day to day, the role spans ransomware, business email compromise, cloud and identity compromise, and insider threat investigations, alongside executive briefings, post-incident reviews, and tabletop exercises, across a fully remote environment.

Skills & Experience

Candidates should bring three to five years of hands-on incident response experience alongside up to a decade in client-facing consulting. Technical proficiency across endpoint, cloud, identity, SaaS, and network forensics is essential, with tool experience including EnCase, FTK, Magnet AXIOM, and Velociraptor. Prior incident commander responsibility and stakeholder management skills are required.

Who It Suits

This role suits a seasoned DFIR professional who is equally comfortable leading technical investigations and advising executives, legal counsel, and insurers under pressure. Someone with a proven track record of mentoring technical teams, managing concurrent high-stakes engagements, and translating complex findings into clear business risk guidance will thrive here.