> Markdown version of [/jobs/ext/2295319-incident-response-and-forensics-lead](https://www.wearedevelopers.com/jobs/ext/2295319-incident-response-and-forensics-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Response and Forensics Lead

- **Company:** ClearFocus Technologies
- **Location:** Leesburg, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cyber Security, Computer Forensics, Identity and Access Management, Network Security, Encase, Cyber Warfare
- **Published:** August 29, 2026
- **Apply:** https://www.careerjet.com/job/usc0f1ac432af701cc6a4639bbcbed18c3/eaa

## About the Role

* 7+ years of related experience with a bachelor or higher degree or an additional 3 years of experience can be substituted with an associate degree

## Description

Incident Response & Forensics Lead: 'This is a hands-on role, responsible for managing a team and performing investigations, analysis, and responses to cyber incidents. This person must be able to work on-site . This role provides technical support in areas of cyber security to include cloud security, endpoint security, access management, secure networking and incident response. We need someone with cyber incident investigation and forensics experience (GCFE, GCIH or CySA); experience with Magnet / Graykey and Encase / Cellebrite tooling is an important value add. The ideal candidate will have a background in incident handling and forensics that has been matured into a mid-level PM.
Responsibilities include, but are not limited to:

 * Manage day to day operations of the team
 * Perform briefings, direct coordination with the customer, develop responses to incidents to upper Federal Leadership
 * Collect intrusion artifacts (e.g., source code, malware, trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
 * Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
 * Coordinate incident response functions.
 * Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response
 * Cybersecurity Operations, Security Risk Assessment


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)