Regional Technical Lead – DFIR

About the role

Group-IB is seeking a Regional Technical Lead for Digital Forensics and Incident Response (DFIR). The lead will serve as the primary technical anchor and escalation point for complex cybersecurity incidents, operating under the guidance of a Regional Head and ensuring 24/7 technical excellence across the region.

Key responsibilities

• Provide continuous 24/7 DFIR service, including weekend coverage.
• Conduct onsite engagements to support clients in critical situations.
• Apply hands‑on expertise in Windows, Linux and memory forensics.
• Lead technical direction during high‑stakes incidents and act as the initial escalation point for the team and clients.
• Resolve complex, non‑discrete problems and make rapid decisions with incomplete data.
• Drive research activities, encourage publication of papers and stay ahead of emerging automated threats.

Required profile

• Deep technical experience in digital forensics and incident response.
• Ability to work under pressure in a 24/7 operational environment.
• Strong analytical skills and capacity to make sound decisions with limited information.
• Commitment to continuous learning and research in cybersecurity.

Required skills

• Windows forensics
• Linux forensics
• Memory analysis
• Incident response