{"id":2048946,"url":"https://alion.io/job/spry-methods-inc-digital-forensics-incident-response-lead","title":"Digital Forensics Incident Response Lead","company":{"id":6239,"name":"Spry Methods","domain":"sprymethods.com","url":"https://alion.io/company/spry-methods-inc","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":76,"open_postings":9,"ghost_share":0,"stale_share":0.778,"repost_share":0,"time_to_fill_p50_days":64,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Linthicum Heights, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":200000,"max":225000,"currency":"USD","period":"year","gross":null,"usd_annual":225000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-07T18:49:02Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-19T07:51:45Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Spry Methods is seeking a Digital Forensics and Incident Response (DFIR) Lead to direct all DFIR activities at a government digital forensics laboratory. This position manages the intrusion analysis and incident response staff and gives them technical oversight. It is responsible for directing intrusion investigations and overseeing analysis of advanced persistent threat (APT) activity across multiple forensic and intelligence data sources.\nWhat Your Day-To-Day Looks Like (Position Responsibilities):\nLead CFL Digital Forensics and Incident Response activities.\n\nManage intrusion analysis and incident response personnel.\n\nDirect network intrusion analysis, malware forensics, and memory analysis.\n\nLead intrusion investigations and monitorinvestigative quality and efficiency.\n\nAnalyze advanced persistent threat activity.\n\nCorrelate findings from host forensics, network logs, and threat intelligence.\n\nBrief technical findings toGovernment leadership.\n\nEnsure all intrusion and incident response activities comply withthe PWS.\n\nServe as the primary Government technical point of contact for intrusion analysis and incident response.\n\nProactively identifyand communicate technical, programmatic, and resource limitations.\n\nWhat You Need to Succeed (Minimum Requirements):\nTS/SCI clearance eligible.\n\nActive DFE, GCFA, GIAC Certified Incident Handler (GCIH), or equivalent certification approved by the COR.\n\nAt least seven years of hands-on Digital Forensics and Incident Response experience, including at least five years focused on network intrusion analysis, malware forensics, and memory analysis.\n\nAt least three years of leadership or supervisory experience within the last five years leading intrusion investigations, managing incident responders, and briefing technical findings to leadership.\n\nDemonstrated experience within the last three years analyzing advanced persistent threat activity and correlating findings across host forensics, network logs, and threat intelligence.","description_format":"text","description_chars":1994,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Information Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-07T20:58:40Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 1","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":1,"median_offered_wage_usd":122500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.893,"p_room":1,"age_days":11,"expected_fill_days":64,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":225000,"is_top_pay":true},"html_url":"https://alion.io/job/spry-methods-inc-digital-forensics-incident-response-lead","json_url":"https://alion.io/job/spry-methods-inc-digital-forensics-incident-response-lead.json","meta":{"generated_at":"2026-10-19T09:57:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7064,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6239},"rest":"https://alion.io/mcp/rest/get_company?id=6239"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fspry-methods-inc-digital-forensics-incident-response-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fspry-methods-inc-digital-forensics-incident-response-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fspry-methods-inc-digital-forensics-incident-response-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/spry-methods-inc-digital-forensics-incident-response-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fspry-methods-inc-digital-forensics-incident-response-lead"}]}