Lead forensic and incident response investigations involving host, network, and application analysis. Triage high-stakes security events, identify attacker tactics and IOCs, develop investigative tools, and provide actionable remediation guidance. Prepare technical and executive reports, communicate findings to clients and stakeholders, support ransomware investigations, and guide engagements from discovery through mitigation and remediation. This hybrid role requires McLean, VA-area residency and approximately 20% office attendance.