Job Details

Associate Director of Digital Forensics and Incident Response / San Francisco

  2025-08-28     Motion Recruitment     San Francisco,CA  
Description:

A Global investigations firm is currently looking to add an Associate Director of Digital Forensics and incident Response to their team. This organization works with financial institutions, Fortune 500 companies , law institutions and more.

The Director of DFIR will lead the organization's Digital Forensics and Incident Response function, overseeing complex security investigations, major incident response operations, threat hunting, forensic analysis, and strategic response planning. This role will be instrumental in shaping the organization's cyber resilience, managing a skilled DFIR team, and coordinating responses to advanced persistent threats (APTs), data breaches, and insider threats.

Required Skills & Experience

  • Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Security, or related field
  • 8+ years in cybersecurity, including 4+ years in a DFIR leadership or senior management role.
  • Proven experience managing large-scale security incidents and conducting digital forensic investigations.
  • Strong knowledge of threat actors, attack vectors, and malware analysis.
  • Hands-on experience with tools such as EnCase, X-Ways, Cellebrite, FTK, Carbon Black, CrowdStrike, Splunk, or similar.

What you Will be doing

Lead and manage the DFIR team, including analysts, responders, and forensic investigators.

Define and maintain the DFIR strategic roadmap aligned with enterprise security goals.

Oversee and direct response to security incidents across cloud, on-premises, and hybrid environments.

Direct forensic collection, analysis, and preservation of digital evidence using industry-standard tools.

Oversee investigations into internal misconduct, IP theft, fraud, and external attacks.

The Offer

You will receive the following benefits :

Medical, Dental, and Vision Insurance

Vacation Time

Stock Options

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.

J-18808-Ljbffr


Apply for this Job

Please use the APPLY HERE link below to view additional details and application instructions.

Apply Here

Back to Search