Regional Technical Lead – DFIR

About the role

Group-IB is seeking a Regional Technical Lead for Digital Forensics and Incident Response (DFIR) to serve as the primary technical anchor during complex cybersecurity incidents. Reporting to the Regional Head, the Lead will operate 24/7, providing hands‑on expertise and guiding the technical direction of the DFIR team across the region.

Key responsibilities

• Deliver continuous 24/7 DFIR service, including weekend shifts and on‑site client engagements in critical situations.
• Lead incident management by defining technical approaches, coordinating cross‑domain actions, and ensuring high‑quality forensic analysis.
• Provide technical mentorship, drive skill development, and conduct quality assurance for the team’s investigations.
• Perform hands‑on forensic examinations on Windows, Linux, and memory artifacts.
• Collaborate closely with the Regional Head to align operational activities with strategic guidance.

Required profile

• Proven experience in digital forensics and incident response within a fast‑paced, 24/7 environment.
• Strong analytical mindset with the ability to troubleshoot complex technical problems.
• Excellent communication skills to convey findings clearly to clients and internal stakeholders.

Required skills

• Windows forensics
• Linux forensics
• Memory analysis
• Incident response