Incident Response (DFIR) Case Manager - Cybersecurity - Remote

Overview

The Incident Response (DFIR) Case Manager is responsible for providing support to clients when they have become or suspect they may be the victim of a cyber-attack. This role involves conducting high-quality and timely incident response investigations and advising clients on recovery and remediation steps.

In Short

• Perform forensic reviews of client systems for indicators of compromise.
• Conduct triage and case management for incident response clients.
• Document evidence and create detailed reports.
• Consult with clients on incident response programs.
• Deliver proactive projects including tabletop exercises and assessments.
• Participate in on-call rotation for client support.
• Continue education in cyber forensics and attack methodologies.
• Attend internal meetings and collaborate with team members.
• Work standard hours with potential for additional client calls.
• Minimal travel for conferences or client projects.

Requirements

• 3-5 years of information security experience.
• Experience with Active Directory and cloud environments.
• Prior experience in threat hunting and incident handling.
• Certifications such as GCIH, GCFA, ECIH preferred.
• Solid understanding of computer systems administration.
• Strong analytical skills to interpret data and trends.
• Ability to communicate complex information effectively.
• Proven customer service skills and a customer-focused mindset.
• Ability to handle large amounts of data.
• Proficient in Microsoft Office Suite.

Benefits

• Flexible and rewarding work environment.
• Medical, dental, and vision insurance.
• 401(k) with employer match up to 4%.
• Unlimited paid time off.
• Paid parental leave.
• Education and growth assistance.
• Pet insurance.
• Employee assistance program (EAP).
• Life and disability insurance.
• Opportunity to work with a dedicated team in a reputable culture.