Managing Director - Digital Forensics & Incident Response DFIR

A leading global risk management and intelligence services firm is looking to appoint a Managing Director to join its Chicago or New York offices.

The firm is seeking a dynamic, experienced new team member to lead and help grow the Digital Forensics & Incident Response (DFIR) services. The firm has built a world-class DFIR capability over the past several years, and is looking to hire a Managing Director with extensive experience from the public and/or private sector to build on success and help innovate into the future.

Key Responsibilities

1. Managing the firm’s DFIR practice, including overseeing all digital forensics and incident response projects and ensuring projects are completed efficiently, within scope, and to the highest standards of quality.
2. Providing technical expertise on complex cases, guiding teams through investigation, collection, analysis, and reporting of digital evidence.
3. Innovating and staying at the forefront of industry trends, tools, and methodologies.
4. Leading and mentoring the team of skilled DFIR professionals, including oversight of hiring, training, and fostering a collaborative, entrepreneurial culture.
5. Developing and executing strategies to expand the DFIR practice, including through business development, client nurturing, conference attendance, speaking engagements, and proposal creation.
6. Collaborating with senior leadership to shape the strategic direction of the firm’s DFIR practice.
7. Managing response efforts during cybersecurity incidents, working with clients to develop effective strategies for containment, mitigation, and recovery.
8. Ensuring the timely and thorough documentation of findings, maintaining chain of custody and delivering comprehensive, actionable reports to clients.
9. Working closely with other teams (e.g., legal, compliance, cybersecurity) to provide integrated investigative services.

Skills, Knowledge & Experience

Experience: Minimum of ten (10) years of experience in digital forensics, incident response, or a related field, with at least three (3) years in a leadership or management capacity. Proven track record of leading successful DFIR engagements from start to finish.

Technical Skills: Strong technical background in digital forensics tools (e.g., EnCase, FTK, Cellebrite, XWays, etc.) and incident response, EDR, cybersecurity platforms, as well as cloud-based environments (M365, G-Suite, AWS, etc.) is required. Proficiency in handling a variety of operating systems (e.g., Linux, Windows, Mac, iOS, virtual machines, etc.) and file systems (e.g., FAT, NTFS, EXT, etc.). Must be familiar with digital evidence collection from a variety of sources. Expert-level proficiency in data and log file analysis and analytics tools such as SQL, Python, Tableau, Splunk, Excel, etc. is necessary.

Leadership Abilities: Exceptional leadership, communication, analytical, and interpersonal skills. Ability to lead teams, build client trust, and provide strategic direction for the practice.

Certifications (preferred):

• Certified Information Systems Security Professional (CISSP)
• Certified Incident Handler (GCIH)
• Certified Forensic Computer Examiner (CFCE)
• Other relevant certifications in DFIR or cybersecurity.

Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (Master’s or advanced certifications are a plus).

Seniority level

Director

Employment type

Full-time

Job function

Research, Legal, and Consulting

Industries

Professional Services, Security and Investigations, and Business Consulting and Services

#J-18808-Ljbffr