Provides strategic and operational leadership for CYPFER’s DFIR service line. Oversees complex incident response and recovery engagements, delivery governance, quality standards, escalations, client relationships, and executive communications. Leads Senior Managers and Managers, develops talent, advances methodologies and tooling strategy, supports proposals and business development, and contributes to account growth and thought leadership. The remote role includes on-call participation and short-notice travel for critical client engagements.
About the Role
The Director provides tactical-strategic leadership for CYPFER's DFIR service line. The role ensures delivery excellence across large and multi-stream engagements, supports strategic account development, and provides subject matter guidance across technical, operational, and managerial domains. The Director bridges deep technical understanding with governance, client influence, and organizational capability building — overseeing Senior Managers, Managers, strengthening client relationships at senior levels, and ensuring high-quality, scalable delivery aligned with company strategy.
Core Responsibilities
- Oversee delivery governance for large and multi-stream incident response and recovery engagements across the service line.
- Ensure quality, consistency, and adherence to best practices across all engagements.
- Direct and coordinate the work of Senior Managers and Managers to meet client expectations and delivery standards.
- Guide Senior Managers and Managers in scoping, planning, and execution of complex delivery.
- Ensure methods, standards, and service pillars are consistently applied across the DFIR service line.
- Support escalation management and executive communication during high-severity incidents.
- Provide subject matter expertise during client meetings, proposals, and strategic discussions.
- Influence client decisions through insights on industry trends, emerging risks, and CYPFER's service capabilities.
- Partner with account management teams to strengthen client relationships and ensure alignment with strategic objectives.
- Participate in on-call rotation for high-severity escalations; ability to engage outside normal business hours as needed.
- This role is remote but requires flexibility to travel on short notice to client sites for critical engagements or strategic meetings.
Team & Practice Contribution
- Inspire and coach team members to align with organizational vision and strategy.
- Mentor Senior Managers, Managers, Senior Consultants, and Subject Matter Experts to enhance leadership and technical capabilities.
- Support succession planning by identifying and developing high-potential talent across the service line.
- Foster a culture of collaboration, continuous learning, and accountability.
- Contribute to methodology evolution, tooling strategy, and delivery frameworks across the service line.
- Contribute to strategic service-line direction by advising on market trends and evolving client needs.
- Stay current with emerging threats, technologies, and regulatory requirements.
- Provide strategic input for proposals, RFPs, and high-value client presentations.
- Collaborate with BD teams on service positioning, competitive differentiation, and opportunity shaping.
- Contribute to account growth strategies and support pipeline development.
- Contribute to cross-functional projects and organizational development.
- Represent CYPFER at conferences, webinars, and thought leadership forums.
What We're Looking For
- 10+ years of experience in DFIR, incident response, or a related cybersecurity domain, with demonstrated progression into senior leadership roles.
- Proven delivery governance capability — managing large or multi-stream engagements across a portfolio of Senior Managers and Managers.
- Deep DFIR knowledge — sufficient technical credibility to guide Senior Managers, validate approaches, and provide subject matter expertise with clients.
- Advanced client relationship management — able to influence at senior and executive levels and navigate complex stakeholder environments.
- Strong people leadership — track record of developing Managers, Senior Consultants, and technical specialists into high-performing practitioners.
- Delivery governance and risk management — strong command of performance, scope, quality, and escalation oversight across multiple concurrent portfolios.
- Strategic thinking combined with operational control — able to set direction while maintaining accountability for delivery outcomes.
- Ability to communicate complex technical content to executive and board-level audiences.
Preferred Skills
- Bachelor's or advanced degree in Cybersecurity, Computer Science, Business, or a related field — or equivalent demonstrated expertise.
- Industry certifications such as GCFA, GCFR, GCIH, CCFR, CCHF, AWS Certified or similar are a strong asset.
Similar Jobs
Cybersecurity
Lead and manage DFIR engagements and a 3-5 person forensic team, coordinate with clients and stakeholders, conduct forensic analysis across Windows/Linux and cloud environments, mentor staff, refine IR processes, produce clear incident reports, and provide on-call incident support.
Top Skills:
AWSAxiomAzureElkEncaseFtkGCPLinuxOpen-Source Forensic ToolsVolatilityWindows
Artificial Intelligence • Consumer Web • Edtech • HR Tech • Information Technology • Software • Conversational AI
Manage strategic customer accounts after purchase, driving onboarding, adoption, retention, expansion, and renewal. Advise learning leaders on digital learning strategies, establish success metrics, conduct business reviews, monitor account health, mitigate churn risk, resolve issues, and identify upsell opportunities. Collaborate with account executives and internal teams while demonstrating product value and supporting organizational upskilling initiatives.
Top Skills:
ChurnzeroExcelMicrosoft OutlookMicrosoft PowerpointMicrosoft WordSalesforce CRM
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Monitor and respond to real-time security alerts across endpoint, identity, email, and cloud environments. The analyst communicates with customers, investigates EDR telemetry, logs, forensic artifacts, Microsoft 365 threats, BEC, and AITM attacks, and provides remediation guidance. The role also supports incident detection processes and countermeasures while developing cybersecurity, systems administration, network analysis, scripting, and AI-assisted security operations skills. Candidates must work a hybrid 4x10 schedule, including one weekend day.
Top Skills:
Active DirectoryAi ModelsBashEdrLinuxmacOSMicrosoft 365Microsoft Entra IdMitre Att&CkNg-SiemOktaPowershellPrompt EngineeringPythonWindows
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
