11 dfir jobs at 9 companies in Maryland

1mo
Save
Mark Applied
Hide
Senior Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Elkridge, Maryland, United States
RemoteFull Time
Surefire Cyber
Surefire Cyber: Provides rapid incident response and digital forensics services.
Experienced DFIR professional with forensic analysis, incident response, malware analysis, client-facing skills, and ability to provide after-hours on-call support.
ELK, Axiom, Encase, FTK
1mo
Save
Mark Applied
Hide
Principal Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Elkridge or United States
$100k-$160k/yr RemoteFull Time
Surefire Cyber
Surefire Cyber: Provides rapid incident response and digital forensics services.
Experienced DFIR professional with technical forensic analysis, incident response leadership, client-facing skills, team mentoring, and availability for after-hours on-call support.
ELK, Axiom, EnCase, FTK, Microsoft Teams
1w
Save
Mark Applied
Hide
Digital Forensics SME
Rockville, Maryland, United States
$140k-$184k/yr OnsiteFull Time
ActioNet
ActioNet: Provides IT modernization and cybersecurity services for government agencies.
8+ YOEBachelor's degree in a relevant technology field, 8+ years of specialized incident response experience, advanced DFIR expertise, enterprise forensic toolset experience, and evidentiary documentation experience.
DFIR, SOC, CMMI-DEV, CMMI-SVC, ISO 20000, ISO 27001, ISO 9001, HDI, Agile, DevSecOps, C4ISR, SIGINT, FSA
2mo
Save
Mark Applied
Hide
Senior Director, Digital Forensics and Incident Response
New York City or Maryland or Tel Aviv or San Francisco or London or Budapest or United States or South America
RemoteFull Time
BlueVoyant
BlueVoyant: Managed detection, response, and threat intelligence security services.
3+ YOEExperience leading DFIR incidents as incident commander, 3+ years hands-on DFIR, 6+ years client-facing cyber/incident response experience, executive communication, mentoring, familiarity with endpoint/cloud/identity forensics and related tools, US citizenship required.
EnCase, FTK, Magnet AXIOM, Velociraptor, Splunk, Microsoft Sentinel, CrowdStrike, Microsoft 365, Microsoft Entra ID, Azure, AWS, Okta, Google Workspace, KQL, SPL, SQL, PowerShell, Python, Bash
2mo
Save
Mark Applied
Hide
Director, Cyber Security Incident Response Team (CSIRT)
Gaithersburg, Maryland, United States
$169k-$254k/yr HybridFull Time
AstraZeneca
AstraZenecaLondon Stock Exchange: AZN: Researches and develops medicines to treat major diseases globally.
5+ YOE5+ MgmtExtensive enterprise SOC/IR leadership, incident command, DFIR, OT/ICS, cloud governance, 24x7 operations, stakeholder management.
SIEM, SOAR, XDR, LLM, AI
2w
Save
Mark Applied
Hide
FedRamp Customer Success Manager
United States or Washington or Maryland or Virginia
$100k-$140k/yr HybridFull Time
Magnet Forensics
Magnet Forensics: Provides software for digital forensics and evidence recovery.
Strategic customer success experience with enterprise/public-sector accounts, executive engagement, strong technical aptitude in DFIR, experience with Salesforce and Gainsight, ability to manage FedRAMP requirements and travel ~20%.
Gainsight, Salesforce
2mo
Save
Mark Applied
Hide
Senior Cyber Lead
Linthicum Heights, Maryland, United States
$175k-$225k/yr OnsiteFull Time
Quantum Sky
Quantum Sky: Engineers mission-critical technology for federal government and defense sectors.
10+ YOE3+ MgmtBachelor's degree, 10+ years cybersecurity/DFIR experience, 3+ years technical leadership, DoD 8570/8140 baseline (Security+), Top Secret/SCI eligibility, experience with host/network/memory/malware forensics and SIEM/IDS/endpoint tools.
Splunk, ELK Stack, FTK, EnCase, X-Ways, Velociraptor, Volatility, Wireshark, SIEM, IDS/IPS
1mo
Save
Mark Applied
Hide
Director, Cyber Security Incident Response Team (CSIRT)
Gaithersburg, Maryland, United States
$169k-$254k/yr HybridFull Time
AstraZeneca
AstraZenecaLondon Stock Exchange: AZN: Global biopharmaceutical developing and manufacturing prescription medicines.
5+ YOE5+ MgmtSenior leader to command enterprise incident response across cloud, on-premises and OT/ICS; requires 5+ years SOC/IR leadership, DFIR, MITRE ATT&CK, SIEM/SOAR/XDR, cloud/identity/endpoint expertise, and strong communication.
SIEM, SOAR, XDR, LLM, MITRE ATT&CK
2mo
Save
Mark Applied
Hide
Senior Cyber Lead
Linthicum Heights, Maryland, United States
$175k-$225k/yr OnsiteFull Time
Tyto Athene
Tyto Athene: Provides IT modernization and cybersecurity services to government agencies.
10+ YOE3+ MgmtBachelor's degree, 10+ years cybersecurity/DFIR experience, 3+ years senior technical leadership, DoD RMF/STIG knowledge, experience with host/network/memory/malware forensics, SIEM/IDS/endpoint tech, and ISO/IEC 17025 evidence handling.
Splunk, ELK Stack, FTK, EnCase, X-Ways, Velociraptor, Volatility, Wireshark, SIEM, IDS/IPS
2w
Save
Mark Applied
Hide
Security Operations Center (SOC) Tier 3 Analyst / Incident Responder
Baltimore, Maryland, United States
OnsiteFull Time
OneMain Financial
OneMain FinancialNYSE: OMF: Provides personal loans and credit cards to nonprime consumers.
8+ YOE8+ years cybersecurity experience with 6+ years SOC experience; bachelor\u0002s degree or equivalent; 2+ DFIR/forensics years; requires multiple certifications (e.g., GCFA, GCIH, CISSP); deep expertise in enterprise incident response, detection engineering, and threat hunting.
Elastic Security, KQL, ES|QL/EQL, SQL, PowerShell, Python, Bash, CrowdStrike Falcon, Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud, Defender for Cloud Apps, Elastic, EDR/XDR, NDR, SIEM, SOAR, IDS/IPS, WAF, firewalls, VPN, DNS, DHCP, proxy, CASB, DLP, IAM, PAM, Kubernetes, Azure, AWS, Microsoft 365, Microsoft Entra ID, VMware, Hyper-V
3mo
Save
Mark Applied
Hide
CYBERMAXX, LLC - Sales Engineer
Linthicum Heights, Maryland, United States
RemoteFull Time
CyberMaxx
CyberMaxx: Provides managed detection and response cybersecurity services to organizations.
5+ YOE5+ years in network or information security; 5+ years in customer-facing roles; strong communication; ability to travel up to 20%.
NDR, SIEM, EDR, VRM, DFIR