Digital Forensics Incident Response Lead

Posted 5 Days Ago
Be an Early Applicant
Linthicum, MD, USA
In-Office
200K-225K Annually
Senior level
Other
The Role
Leads digital forensics and incident response activities within a government laboratory. Manages intrusion analysis and incident response personnel, directs network intrusion, malware, and memory analysis, oversees investigations, analyzes advanced persistent threats, correlates forensic and intelligence data, briefs government leadership, ensures contractual compliance, and serves as the primary technical point of contact.
Summary Generated by Built In
Spry Methods is seeking a Digital Forensics and Incident Response (DFIR) Lead to direct all DFIR activities at a government digital forensics laboratory. This position manages the intrusion analysis and incident response staff and gives them technical oversight. It is responsible for directing intrusion investigations and overseeing analysis of advanced persistent threat (APT) activity across multiple forensic and intelligence data sources.

What Your Day-To-Day Looks Like (Position Responsibilities):

     
    • Lead CFL Digital Forensics and Incident Response activities. 

    • Manage intrusion analysis and incident response personnel. 

    • Direct network intrusion analysis, malware forensics, and memory analysis. 

    • Lead intrusion investigations and monitor investigative quality and efficiency. 

    • Analyze advanced persistent threat activity. 

    • Correlate findings from host forensics, network logs, and threat intelligence. 

    • Brief technical findings to Government leadership. 

    • Ensure all intrusion and incident response activities comply with the PWS. 

    • Serve as the primary Government technical point of contact for intrusion analysis and incident response. 

    • Proactively identify and communicate technical, programmatic, and resource limitations. 

What You Need to Succeed (Minimum Requirements):

    • TS/SCI clearance eligible. 

    • Active DFE, GCFA, GIAC Certified Incident Handler (GCIH), or equivalent certification approved by the COR. 

    • At least seven years of hands-on Digital Forensics and Incident Response experience, including at least five years focused on network intrusion analysis, malware forensics, and memory analysis. 

    • At least three years of leadership or supervisory experience within the last five years leading intrusion investigations, managing incident responders, and briefing technical findings to leadership. 

    • Demonstrated experience within the last three years analyzing advanced persistent threat activity and correlating findings across host forensics, network logs, and threat intelligence. 

Skills Required

  • TS/SCI clearance eligibility
  • Active DFE, GCFA, GCIH, or equivalent certification approved by the COR
  • At least seven years of hands-on Digital Forensics and Incident Response experience
  • At least five years focused on network intrusion analysis, malware forensics, and memory analysis
  • At least three years of leadership or supervisory experience within the last five years
  • Experience leading intrusion investigations, managing incident responders, and briefing technical findings to leadership
  • Recent experience analyzing advanced persistent threat activity and correlating host forensics, network logs, and threat intelligence
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: McLean, VA
89 Employees
Year Founded: 2000

What We Do

Spry is a certified Small Business headquartered in McLean, VA. Spry provides Enterprise, C4IT, Management, and Cyber Solutions to the federal government and commercial entities. Founded in 2001, Spry Methods was built on the foundation of combining industry knowledge with unmatched responsiveness to produce results for our customers. Our goal is to build a business dedicated to the maximization of value for all stakeholders starting with our employees, our customers, and our community. We recognize that talented and dedicated employees are our most valued assets and the foundation of our success. Guided by these principles, we have established an impressive track record of proven past performance serving our customers within the Commercial, Federal Civilian, DoD, and Intelligence Communities. A CMMI Level 3 certified and ISO 9001:2008 registered company, Spry is committed to quality and continuous improvement.

Similar Jobs

Samsara Logo Samsara

Staff Product Designer

Artificial Intelligence • Cloud • Computer Vision • Hardware • Internet of Things • Software
Easy Apply
Remote or Hybrid
United States
4000 Employees
144K-257K Annually

NinjaOne Logo NinjaOne

Product Designer

Information Technology • Productivity • Software • Infrastructure as a Service (IaaS)
Remote or Hybrid
19 Locations
2000 Employees
90K-130K Annually

Centerfield Logo Centerfield

Sr. Manager of Medicare Compliance

AdTech • Consumer Web • Digital Media • eCommerce • Marketing Tech • SEO
Remote or Hybrid
United States
890 Employees
75K-95K Annually

BAE Systems, Inc. Logo BAE Systems, Inc.

Test Engineer

Aerospace • Hardware • Information Technology • Security • Software • Cybersecurity • Defense
Hybrid
Rockville, MD, USA
40000 Employees
118K-201K Annually

Similar Companies Hiring

T-Mobile Thumbnail
Other • Utilities
Bellevue, WA
89016 Employees
Rosendin Thumbnail
Other • Manufacturing
San Jose, CA
6219 Employees
OmniCable Thumbnail
Other
West Chester, Pennsylvania
815 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account