Lead and manage DFIR engagements and a 3-5 person forensic team, coordinate with clients and stakeholders, conduct forensic analysis across Windows/Linux and cloud environments, mentor staff, refine IR processes, produce clear incident reports, and provide on-call incident support.

Lead multiple DFIR incident response engagements from scoping through recovery, coordinate cross-functional teams and external stakeholders, produce clear forensic reports, provide after-hours on-call support, and mentor colleagues while improving client security posture.