Cybersecurity Incident Response Lead

Role : Digital Forensics and Incident Response (DFIR) Manager

Duration : 6-months' contract

Location : Hyderabad or Bengaluru

Mode of Employment : Hybrid

The DFIR Manager leads client-facing incident response and forensic engagements, serving as both a technical lead and engagement manager. This role requires strong incident command skills, particularly with ransomware cases, and the ability to align technical, legal, and business workstreams. The manager will oversee multiple engagements, ensuring quality, consistency, and effective coordination across the team. They will also serve as a mentor and escalation point for supervisors and consultants while maintaining strong relationships with clients, counsel, and insurers. The ideal candidate combines technical expertise, leadership presence, and sound judgment to manage the full lifecycle of an incident and keep all stakeholders aligned.

Responsibilities :

• Lead multiple client-facing incident response and forensic engagements, ensuring quality and consistency across delivery.
• Serve as incident commander during active crises, coordinating technical, legal, and business response efforts.
• Define engagement scope, objectives, and communication plans from the outset.
• Act as a trusted advisor to clients, external counsel, and cyber insurers, providing clear direction under pressure.
• Supervise and mentor team members, fostering accountability, growth, and strong client communication.
• Review and deliver concise reports that translate technical findings into actionable insights for executives.
• Support practice development through playbook refinement, process improvement, and knowledge sharing.
• Participate in on-call rotation and provide oversight during critical incidents.

Qualifications :