Regional Technical Lead DFIR

About the role

Group-IB is seeking a Regional Technical Lead for Digital Forensics and Incident Response (DFIR). Reporting to the Regional Head, you will be the primary technical authority during complex cyber incidents, ensuring 24/7 operational excellence across multiple regions.

Key responsibilities

• Provide continuous 24/7 DFIR service, including weekend shifts and on‑site client engagements.
• Lead the technical direction during high‑stakes cybersecurity incidents and act as the initial escalation point for the team and clients.
• Support the team in solving complex, non‑discrete problems and make rapid decisions with incomplete data.
• Conduct hands‑on investigations in Windows, Linux, and memory forensics.
• Drive research initiatives, publish papers, and stay ahead of emerging automated threats.

Required profile

• Extensive experience in digital forensics and incident response.
• Ability to work in a 24/7 operational environment and handle weekend duties.
• Strong analytical mindset with the capacity to make sound decisions under pressure.
• Passion for research and continuous learning in cybersecurity.

Required skills

• Windows forensics
• Linux forensics
• Memory analysis
• Incident response

What we offer

• Opportunity to work with a leading global cybersecurity firm.
• Access to cutting‑edge tools and technologies.
• Professional growth through research and publication support.