Digital Forensics & Incident Response (dfir) Manager

12

Base: $107,000 - $214,500; bonus/equity: discretio...
Hybrid
Lead incident commander during high-severity events
Oversee multiple concurrent ransomware investigations
Align technical response with legal and insurance teams
The DFIR Manager serves as the incident commander and engagement leader, overseeing complex matters while aligning technical, legal, executive, and insurance workstreams

Job Summary

  • The DFIR Manager serves as the incident commander and engagement leader, overseeing complex matters while aligning technical, legal, executive, and insurance workstreams.
  • This role requires deep expertise in ransomware tradecraft and the ability to guide cross-functional response efforts at the executive level during critical incidents.
  • RSM offers a competitive benefits package including flexible scheduling to help employees balance life's demands while serving clients.

Matching Summary

The DFIR Manager serves as the incident commander and engagement leader, overseeing complex matters while aligning technical, legal, executive, and insurance workstreams.

Salary

Base: $107,000 - $214,500; Bonus/Equity: Discretionary bonus based on performance; Benefits: Competitive package with flexible schedule

Skills & Requirements

Must-have

  • Lead incident commander during high-severity events
  • Oversee multiple concurrent ransomware investigations
  • Align technical response with legal and insurance teams
  • Deep understanding of threat actor operations
  • Hands-on familiarity with EDR platforms and SIEM

Nice-to-have

  • Strong executive presence and crisis communication
  • Mentoring supervisors and consultants
  • Willingness to continuously learn new capabilities
  • Experience coordinating with cyber insurers
  • Participation in on-call rotation

Key Requirements

  • Bachelor's degree in Cybersecurity or equivalent experience
  • Proven experience leading enterprise-scale ransomware investigations
  • Certifications such as GCFA, GCIH, CISSP, or OSCP preferred
  • No sponsorship available for entry-level candidates requiring F-1 visa

Work Rights

Not specified

Tailored Resume

Cover Letter