Technical Manager; Digital Forensics & Incident Response

Qualifications

• Clearance requirement:
  Active Top Secret with SCI eligibility
• Bachelor's or Master's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering
• 12 years of experience, including supervisory or management experience
• One of the following active certifications required:
  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Certified Incident Handler (GCIH)
  • Or equivalent certification
• Minimum 7 years of hands‑on experience in Digital Forensics and Incident Response (DFIR), with at least 5 years focused on network intrusion analysis, malware forensics, and memory analysis
• Minimum 3 years of experience within the last 5 years in a leadership or supervisory role, responsible for leading intrusion investigations, managing incident responders, and briefing technical findings to leadership
• Demonstrated experience within the last 3 years analyzing advanced persistent threat (APT) activity and correlating findings from multiple data sources (e.g., host forensics, network logs, and threat intelligence)

The Technical Manager will serve as the lead for all Digital Forensics and Incident Response (DFIR) activities. This role provides direct management and technical oversight of all activities performed by intrusion analysis and incident response personnel. The Technical Manager will be responsible for leading intrusion investigations, managing incident responders, briefing technical findings to leadership, and ensuring all tasks are accomplished in accordance with requirements.

The candidate will act as the primary technical point of contact for the Government regarding all intrusion analysis and incident response tasks and will proactively alert the Government to potential technical, programmatic, or resource limitation issues.

This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area.