Digital Forensics & Incident Response (dfir) Manager

RSM UK

Base: $107,000 - $214,500; bonus/equity: discretio...
Hybrid
Incident commander for high-severity events
Enterprise-scale ransomware investigation experience
Deep understanding of threat actor tradecraft
The DFIR Manager serves as the incident commander during high-severity events, particularly ransomware and enterprise-scale breaches

Job Summary

  • The DFIR Manager serves as the incident commander during high-severity events, particularly ransomware and enterprise-scale breaches.
  • This role requires deep expertise in aligning technical response efforts with legal, regulatory, insurance, and executive considerations.
  • RSM offers a competitive compensation package ranging from $107,000 to $214,500 along with flexible scheduling options.

Matching Summary

The DFIR Manager serves as the incident commander during high-severity events, particularly ransomware and enterprise-scale breaches.

Salary

Base: $107,000 - $214,500; Bonus/Equity: Discretionary bonus based on performance; Benefits: Competitive package with schedule flexibility

Skills & Requirements

Must-have

  • Incident commander for high-severity events
  • Enterprise-scale ransomware investigation experience
  • Deep understanding of threat actor tradecraft
  • Experience with EDR platforms and SIEM technologies
  • Ability to coordinate with legal counsel and insurers

Nice-to-have

  • Strong executive presence and crisis communication
  • Mentoring capabilities for junior DFIR leaders
  • Willingness to participate in on-call rotation
  • Continuous learning mindset for new capabilities

Key Requirements

  • Bachelor's degree in Cybersecurity or related field
  • Proven experience leading enterprise-scale breach investigations
  • Certifications such as GCFA, GCIH, CISSP, or OSCP preferred
  • US work authorization required (no sponsorship)

Work Rights

Must have US work authorization

Tailored Resume

Cover Letter