ZipRecruiter

Log In

1

Dfir Manager Jobs (NOW HIRING)

Flock Safety

Senior Adversary Pursuit Engineer

$140K - $175K/yr

... DFIR/Threat Hunts, you will focus on developing and executing functions within Flock's Adversary ... Leadership & Management: * Mold the long-term threat hunting roadmap, including strategy, data ...

KPMG

Manager, Forensic Technology

Boston, MA

$103K - $206K/yr

Manage and advise clients through the execution of end-to-end dead-box forensic investigations ... Experience utilizing industry-standard command-line DFIR tools and techniques * Experience with ...

KPMG

Manager, Forensic Technology

Washington, DC

$103K - $206K/yr

Manage and advise clients through the execution of end-to-end dead-box forensic investigations ... Experience utilizing industry-standard command-line DFIR tools and techniques * Experience with ...

KPMG

Manager, Forensic Technology

Dallas, TX

$103K - $206K/yr

Manage and advise clients through the execution of end-to-end dead-box forensic investigations ... Experience utilizing industry-standard command-line DFIR tools and techniques * Experience with ...

KPMG

Manager, Forensic Technology

Los Angeles, CA

$103K - $206K/yr

Manage and advise clients through the execution of end-to-end dead-box forensic investigations ... Experience utilizing industry-standard command-line DFIR tools and techniques * Experience with ...

KPMG

Manager, Forensic Technology

San Francisco, CA

$103K - $206K/yr

Manage and advise clients through the execution of end-to-end dead-box forensic investigations ... Experience utilizing industry-standard command-line DFIR tools and techniques * Experience with ...

KPMG

Manager, Forensic Technology

New York, NY

$103K - $206K/yr

Manage and advise clients through the execution of end-to-end dead-box forensic investigations ... Experience utilizing industry-standard command-line DFIR tools and techniques * Experience with ...

KPMG

Manager, Forensic Technology

Boston, MA · On-site

$103K - $206K/yr

Manage and advise clients through the execution of end-to-end dead-box forensic investigations ... Experience utilizing industry-standard command-line DFIR tools and techniques * Experience with ...

KPMG

Manager, Forensic Technology

Chicago, IL

$103K - $206K/yr

Manage and advise clients through the execution of end-to-end dead-box forensic investigations ... Experience utilizing industry-standard command-line DFIR tools and techniques * Experience with ...

Vaco by Highspring

IT SOC Manager

Jacksonville, FL · On-site

Coordinate cross functional response efforts with DFIR, IT, legal, privacy, HR, and communications ... Experience managing security teams or leading SOC operations * Hands on experience with enterprise ...

Beyond SOF

Lab Manager - III

Arlington, VA · On-site

Team personnel provide front line response for digital forensics/incident response (DFIR) and ... management and deployment across Windows, MacOS, Linux/Unix, and other operating systems and ...

CYBERMAXX, LLC

Sales Engineer

Linthicum Heights, MD · On-site

... DFIR) to continually adapt to new and evolving threats. Our modern MDR (Managed Detection & Response) approach is tailored to the unique characteristics and risk factors of each customer, enabling us ...

next page

Showing results 1-20

All JobsDfir JobsDfir Manager Jobs

Dfir Manager information

What is a DFIR Manager?

A DFIR Manager is a cybersecurity professional responsible for leading Digital Forensics and Incident Response (DFIR) teams. They oversee investigations into security incidents, manage response efforts, and ensure that digital evidence is collected and preserved correctly. DFIR Managers also develop and implement incident response plans, coordinate communication between stakeholders, and provide guidance to technical staff to minimize the impact of cyber threats. Their role is crucial in helping organizations recover from security breaches and in preventing future incidents.

What are the key skills and qualifications needed to thrive as a DFIR (Digital Forensics and Incident Response) Manager, and why are they important?

To thrive as a DFIR Manager, you need a solid background in cybersecurity, digital forensics, and incident response, often supported by a degree in computer science or related fields and industry certifications like GCFA or CISSP. Familiarity with forensic analysis tools (e.g., EnCase, FTK), SIEM systems, and threat intelligence platforms is crucial. Strong leadership, communication, and problem-solving skills help you coordinate teams and effectively manage crisis situations. These skills are vital for leading complex investigations, ensuring rapid and accurate incident response, and protecting organizational assets from cyber threats.

What is the difference between Dfir Manager vs Cybersecurity Analyst?

AspectDfir ManagerCybersecurity Analyst
Required CredentialsCertifications like GIAC, CISSP, or CISA; experience in digital forensics and incident responseCertifications such as CompTIA Security+, CISSP, or GIAC; focus on security monitoring and analysis
Work EnvironmentIncident response teams, forensic labs, corporate security departmentsSecurity operations centers, threat analysis teams, IT departments
Employer & Industry UsageUsed in cybersecurity firms, law enforcement, large corporationsCommon across industries with IT infrastructure, government agencies, private sector

The Dfir Manager primarily oversees digital forensics and incident response processes, focusing on investigating cyber incidents. In contrast, a Cybersecurity Analyst monitors security systems, analyzes threats, and supports prevention efforts. While both roles require cybersecurity certifications and work in security-focused environments, their core responsibilities differ: one manages forensic investigations, the other focuses on threat detection and prevention.

How does a DFIR Manager typically coordinate incident response efforts with other departments during a cybersecurity event?

A DFIR Manager plays a crucial role in orchestrating incident response by collaborating closely with IT, legal, compliance, and executive teams. During a cybersecurity event, they facilitate communication between technical responders and stakeholders, ensuring everyone is informed of the incident's status and required actions. The manager assigns roles, oversees evidence collection, and ensures that response steps align with company policies and regulatory requirements. This cross-functional coordination is essential for timely containment, mitigation, and post-incident review.
More about Dfir Manager jobs
What cities are hiring for Dfir Manager jobs? Cities with the most Dfir Manager job openings:
What are the most commonly searched types of Dfir jobs? The most popular types of Dfir jobs are:
What states have the most Dfir Manager jobs? States with the most job openings for Dfir Manager jobs include:
What job categories do people searching Dfir Manager jobs look for? The top searched job categories for Dfir Manager jobs are:
Dfir Manager jobs near you
Infographic showing various Dfir Manager job openings in the United States as of July 2026, with employment types broken down into 5% Internship, 28% As Needed, 1% Full Time, 55% Temporary, 10% Nights, and 1% Summer. Highlights an 65% Physical, 4% Hybrid, and 31% Remote job distribution.

Sr Security Engineer

Strategic Resources International USA

Bethesda, MD • Remote

$122K - $168K/yr

Contractor

Posted 25 days ago

Job description

2. Sr Security Engineer - Specialist (IAM / Data Protection / Forensics)
Location: Remote (US)
Experience: 12+ Years

Provide deep specialist expertise in Identity & Access Management, Data Protection Architecture, or Digital Forensics & Incident Response to secure sensitive healthcare data at scale.

Key Responsibilities

  • IAM: Design and operate identity, access, SSO/MFA, and least-privilege models across cloud and SaaS environments.
  • Data Protection: Architect encryption, DLP, key management, and data-classification controls for PHI.
  • Forensics: Lead incident response, forensic investigations, evidence handling, and detection engineering.
  • Define standards, automation, and reference architectures within the specialty.

Required Skills

  • AWS
  • Python
  • Deep AWS security expertise in the relevant specialty.
  • IAM platforms (Okta, AWS IAM Identity Center, Entra).
  • DLP/KMS/HSM and data-security architecture.
  • DFIR tooling, SIEM (Splunk), and detection engineering.
  • Relevant certifications such as CISSP, GCIH, GCFA, or AWS Security.