Senior Director of Digital Forensics & Incident Response

Date Posted:

Country:

United States of America

Location:

OT999: 1CP - Farmington, CT One Carrier Place, Farmington, CT, 06032 USA

Would you like to join a truly international, talent driven company that values Safety, Ethics, Quality, Innovation and Employee Opportunity?

The Senior Director of Digital Forensics & Incident Response (DFIR), reporting to the VP of Global Cyber Defense, is a strategic and operational leader responsible for building, scaling, and leading a global capability to detect, respond to, and investigate cyber incidents across the enterprise.

This leader will oversee a 24x7x365 Global Security Operations Center (GSOC), lead enterprise-wide incident response efforts, and drive forensic investigations supporting Legal, HR, Compliance, Privacy, and executive stakeholders, while ensuring alignment with regulatory, legal, and risk management requirements.

On a typical day you will:

• Lead and operate a 24x7x365 GSOC serving enterprise IT and OT environments.
• Define and execute the GSOC strategy, including partnering with detection engineering, automation, threat-intelligence integration, and continuous maturity improvement.
• Establish and monitor Service Level Agreements (SLAs), Key Performance Indicators (KPIs), Key Risk Indicators (KRIs)
  SLAs, KPIs, and operational metrics to ensure effective threat detection and response.
• Drive continuous improvement of advanced technologies (SIEM, SOAR, UEBA, XDR) to enhance visibility and reduce response times.
• Lead the global Digital Forensics and Incident Response (DFIR) program across a large, distributed enterprise environment.
• Define and execute a multi-year roadmap for incident response, digital forensics, cyber investigations, and insider risk capabilities.
• Build, mentor, and retain high-performing global teams across DFIR, DLP, and eDiscovery functions.
• Act as a senior advisor to executive leadership during major cyber incidents and crisis situations.

• Oversee the end-to-end incident response lifecycle including preparation, detection, analysis, containment, eradication, and recovery.
• Lead and continuously improve the GSOC.
• Establish and test cyber incident response playbooks, tabletop exercises, and crisis simulations.
• Drive threat-driven and intelligence-led response capabilities.

• Lead advanced digital forensic investigations involving endpoints, cloud, identity systems, and network environments.
• Ensure forensic readiness, evidence preservation, and chain-of-custody standards are maintained.
• Partner with Legal, HR, and Compliance on internal investigations, litigation support, and eDiscovery efforts.

• Oversee enterprise Data Loss Prevention (DLP) and insider risk programs, including policy design, monitoring, and enforcement.
• Leverage platforms such as Microsoft Purview and M365 security capabilities to protect sensitive data.
• Align DLP and insider risk initiatives with regulatory requirements and business objectives.

• Manage strategic relationships with Managed Security Service Providers (MSSPs) and digital forensics vendors.
• Establish and monitor SLAs, KPIs, and KRIs.
• Ensure vendors meet performance, quality, and compliance expectations.

• Drive adoption and optimization of security technologies, including:
• Continuously evaluate emerging technologies to enhance detection, response, and investigative capabilities.

What you will need to be successful:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field
• Relevant certifications strongly preferred: CISSP, CISM, or equivalent, GIAC (e.g., GCFA, GCIH) or forensic certifications, eDiscovery or legal/forensic…