Incident Response Lead (DFIR)

We are seeking an experienced Incident Response Lead to manage and coordinate cybersecurity incident response activities. The ideal candidate will have hands-on experience in Digital Forensics and Incident Response (DFIR) , investigating security incidents, conducting root cause analysis, and leading containment, eradication, and recovery efforts in enterprise environments. Key Responsibilities Lead the investigation and response to cybersecurity incidents. Perform incident triage, analysis, containment, eradication, and recovery. Conduct digital forensic investigations and root cause analysis. Coordinate with SOC, Security Engineering, IT, and business teams during security incidents. Develop and maintain incident response playbooks and procedures. Analyze malware, phishing attacks, ransomware, and other cyber threats. Prepare incident reports and provide recommendations to prevent future incidents. Support threat hunting and continuous improvement of incident response capabilities. Ensure compliance with organizational security policies and industry best practices.

Desired Candidate Profile

• 5 7 years of experience in Cybersecurity.
• Hands-on experience in Incident Response and Digital Forensics (DFIR) .
• Experience investigating security incidents in an enterprise environment.
• Knowledge of malware analysis, ransomware, phishing, and threat detection.
• Experience with SIEM, EDR, and security monitoring tools.
• Strong understanding of Windows, Linux, networking, and security fundamentals.
• Excellent analytical, troubleshooting, and communication skills.
• Nice to Have Certifications such as GCFA, GCIH, GCFE, CHFI, CEH, CySA+, or Security+ .
• Experience with cloud security incident response (Azure, AWS, or GCP).
• Scripting experience (PowerShell or Python).