Regional Technical Lead DFIR

About the Role

The Technical Lead will act as the primary technical anchor and initial escalation point during complex cybersecurity incidents. Led by a Regional Head, this role is deeply rooted in 24/7 technical excellence and cross-domain coordination. You will guide the technical direction of the team, provide extensive quality assurance, and drive the skill‑up and professional growth of team members.

This is a highly specialized, purely technical career path. It explicitly does not include team management, disciplinary leadership functions, or the responsibility to drive the overarching strategic vision of the DFIR teams. You are the ultimate technical authority, not the administrative manager.

• Provide continuous 24/7 service, which includes working on weekends.
• Conduct onsite engagements to support clients directly in critical situations.
• Apply hands‑on technical expertise in default forensics fields:
  Windows, Linux, and Memory.
• Operate under the strategic guidance and leadership of a Regional Head.

• Incident Management & Technical Direction:
  Lead the technical direction during high‑stakes cybersecurity incidents, act as the initial escalation point for the team and the clients, support the team in resolving challenging, complex, and non‑discrete problems, and make sound decisions with incomplete data, balancing analytical depth versus speed of response.
• Research & Technological Foresight:
  Actively engage in academic research and encourage the publication of papers and articles to drive the industry forward; stay up‑to‑date with the continuous adaptation of new technologies and modern methodologies; maintain a deep understanding of emerging tech, such as integrating and properly automating non‑deterministic systems like LLMs into the investigative workflow; provide research advisory to guide the team's investigative and academic efforts;
  
  actively drive the skill‑up and professional growth of DFIR team members; offer speaking and presenting advisory to help team members communicate their findings effectively; leverage your training and education experience to elevate the team's capabilities.
• Quality Assurance & Technical Depth:
  Maintain advanced technical writing skills to ensure reports meet the highest standards; support quality assurance by reviewing technical documents, editing, and conducting review evaluations; maintain a technical deep‑dive expertise in at least one specific forensics‑related field.
• Cross‑Functional Coordination & Planning:
  Coordinate across different domains and cybersecurity disciplines, apply process and project management skills to ensure efficient delivery, support the Regional Head in project planning, specifically in defining project scope descriptions, and utilize strong social skills, specifically expertise in HUMINT to foster collaboration.

• Previous 8 years experience in DFIR roles within cybersecurity organizations
• Fluent in English; proficiency in an additional language is highly preferred
• Strong knowledge of DFIR methodologies, tools, and industry standards
• Strong stakeholder management and interdepartmental collaboration skills
• High‑level decision‑making skills in dynamic and high‑pressure environments
• Proficiency in process management including process design and optimization
• Experience in intelligence tradecraft across cyber and other domains is highly desirable
• A proven track record in academic research is preferred

We foster a supportive, inclusive, and dynamic workplace where every team member is empowered to grow. Whether you’re aiming to deepen your expertise, step into leadership, explore new departments, or take your career abroad, we provide diverse opportunities for professional development. Our team is made up of specialists from around the world who bring deep international expertise and thrive on solving complex challenges.

• Health insurance to support you when it matters most
• Certifications & Continuous Learning:
  Our team holds over 1,000 globally recognized certifications, including CEH, CISSP, OSCP, and more. We cover the cost of professional development through our incentive program.
• Internal training programs covering soft skills, advanced technical training, and recognition and rewards along the way
• Entrepreneurial spirit is encouraged:
  We value initiative and support bold ideas such as launching tech blogs, organizing events, building communities, or starting a sports team