PRI Technology
Senior IT Recruiter at PRI Technology (lori.sklarski@pritechnology.com, 973-732-5454 x27)
DFIR Leader opportunity at a leading global organization (70,000+ employees) in Austin, TX. This role is critical within the cybersecurity umbrella and will be leading all DFIR activities globally. 3 days onsite in Austin, TX.
Salary $200k - $225k + bonus
Responsibilities:
Lead DFIR investigations for major incidents across the enterprise, coordinating across internal and external stakeholders. Manage investigation playbooks and response workflows aligned with industry frameworks (NIST, SANS). Coach and mentor other investigations staff, driving technical skill development and case quality. Conduct forensic acquisition and analysis across endpoints, servers, networks, and cloud (AWS, Azure, M365). Perform memory analysis, disk forensics, log correlation, and malware reverse engineering to support incident containment, eradication, and recovery. Reconstruct attack chains, identify root cause, and assess lateral movement by correlating SIEM, EDR/XDR, packet captures, and threat intelligence sources. Qualifications:
Bachelor's degree in Cybersecurity, Digital Forensics, Information Technology, or a related field; Master's degree preferred. Extensive experience in cybersecurity investigations, digital forensics, or incident response. Demonstrated knowledge of Incident Response and Investigative Methodology. Familiarity with compliance frameworks such as NIST, ISO 27001, and industry-specific regulations. Highest level of integrity and management of confidential information.
#J-18808-Ljbffr
Lead DFIR investigations for major incidents across the enterprise, coordinating across internal and external stakeholders. Manage investigation playbooks and response workflows aligned with industry frameworks (NIST, SANS). Coach and mentor other investigations staff, driving technical skill development and case quality. Conduct forensic acquisition and analysis across endpoints, servers, networks, and cloud (AWS, Azure, M365). Perform memory analysis, disk forensics, log correlation, and malware reverse engineering to support incident containment, eradication, and recovery. Reconstruct attack chains, identify root cause, and assess lateral movement by correlating SIEM, EDR/XDR, packet captures, and threat intelligence sources. Qualifications:
Bachelor's degree in Cybersecurity, Digital Forensics, Information Technology, or a related field; Master's degree preferred. Extensive experience in cybersecurity investigations, digital forensics, or incident response. Demonstrated knowledge of Incident Response and Investigative Methodology. Familiarity with compliance frameworks such as NIST, ISO 27001, and industry-specific regulations. Highest level of integrity and management of confidential information.
#J-18808-Ljbffr