Regional Technical Lead DFIR

About Group-Ib

About The Role

Normal Dfir Duties (24 And 7 Service)

• Provide continuous 24/7 service, which includes working on weekends.
• Conduct onsite engagements to support clients directly in critical situations.
• Apply hands-on technical expertise in default forensics fields: Windows, Linux, and Memory.
• Operate under the strategic guidance and leadership of a Regional Head.

• Incident Management & Technical Direction

• Lead the technical direction during high-stakes cybersecurity incidents.
• Act as the initial escalation point for the team and the clients.
• Support the team in resolving challenging, complex, and non-discrete problems.
• Make sound decisions with incomplete data, constantly balancing analytical depth versus the speed of response.

• Research & Technological Foresight

• Actively engage in academic research and encourage the publication of papers and articles to drive the industry forward.
• Stay up-to-date with the continuous adaptation of new technologies and modern methodologies.
• Maintain a deep understanding of emerging tech, such as integrating and properly automating non-deterministic systems like LLMs into the investigative workflow.
• Provide research advisory to guide the team's investigative and academic efforts.

• Mentorship & Team Growth

• Actively drive the skill-up and professional growth of DFIR team members.
• Provide research advisory to guide the team's investigative efforts.
• Offer speaking and presenting advisory to help team members communicate their findings effectively.
• Leverage your training and education experience to elevate the team's capabilities.

• Quality Assurance & Technical Depth

• Maintain a technical deep-dive expertise in at least one specific forensics-related field.
• Support Quality Assurance by reviewing technical documents, editing, and conducting review evaluations.
• Utilize advanced technical writing skills to ensure reports meet the highest standards.

• Cross-Functional Coordination & Planning

• Coordinate seamlessly across different domains and cybersecurity disciplines.
• Apply process and project management skills to ensure efficient delivery.
• Support the Regional Head in project planning, specifically in defining project scope descriptions.
• Utilize strong social skills, specifically expertise in HUMINT (understanding interpersonal dynamics and communication), to foster collaboration.

What Success Looks Like

• Previous 8 years experience in DFIR roles within cybersecurity organizations
• Fluent in English; proficiency in an additional language is highly preferred.
• Strong knowledge of DFIR methodologies, tools, and industry standards.
• Strong stakeholder management and interdepartmental collaboration skills
• High-level decision-making skills in dynamic and high-pressure environments.
• Proficiency in process management including process design and optimization.
• Experience in intelligence tradecraft across cyber and other domains is highly desirable.
• A proven track record in academic research is preferred.

Our Work Environment & Culture

What Do We Offer

• Comprehensive Health Coverage

• Your well-being comes first. We offer health insurance to support you when it matters most.

• Certifications & Continuous Learning

• Our team holds over 1,000 globally recognized certifications, including CEH, CISSP, OSCP, and more. Through our incentive program, we cover the cost of professional development—because your growth fuels our innovation.

• Meaningful Challenges & Growth Paths

• From soft skills development to advanced technical training, a wide range of internal programs help you expand your skill set—and earn recognition and rewards along the way.
• Entrepreneurial spirit is encouraged
• We value initiative. Whether it’s launching a tech blog, organizing events, building communities, or starting a sports team—Group-IB is a place where bold ideas are supported and celebrated.