DFIR Analyst

LINTHICUM HEIGHTS, MDPosted 30+ days ago

Job summary

• Job post source

  This job is directly from CyberMaxx

• Job overview

  The DFIR Analyst at CyberMaxx leads incident response and crisis management for cybersecurity breaches, playing a critical role in protecting client environments and managing large-scale incidents.

• Responsibilities and impact

  The analyst manages full incident life-cycles including crisis management, containment, analysis, remediation, and reporting, performs threat hunting and automation development, and communicates effectively with clients and internal teams under pressure.

• Experience and skills

  Requires 3-5 years of DFIR experience with leadership in large-scale incidents, strong technical skills in forensics, intrusion analysis, scripting, cloud environments, and familiarity with EDR/SIEM platforms, plus excellent communication and discretion.

• Work environment and culture

  The role demands flexibility, discretion, and collaboration in a high-pressure, sensitive environment with remote teamwork and encrypted communication.

• Team overview

  Works closely with Blue Team and Compliance departments, acting as the primary contact for major incident cases.

• Unique job features

  Involves high-stakes crisis management, interaction with senior leadership and legal counsel, and opportunities to contribute to industry events and publications.

Company overview

CyberMaxx is a cybersecurity company specializing in managed detection and response (MDR) services to protect organizations from cyber threats. They provide 24/7 monitoring, threat detection, incident response, and compliance support, leveraging advanced technologies and a team of security experts to safeguard sensitive data and IT infrastructure. Founded in 2012 and headquartered in Nashville, Tennessee, CyberMaxx focuses on serving healthcare, financial, and other highly regulated industries. The company generates revenue through subscription-based MDR services and custom cybersecurity solutions tailored to client needs. Their commitment to proactive threat management and compliance readiness has positioned them as a trusted partner in the cybersecurity space.

How to land this job

• Tailor your resume to highlight your experience in DFIR with emphasis on managing large-scale incident responses, especially in complex production environments involving Active Directory, database servers, and network topology.

• Emphasize your technical skills in memory and disk forensics, intrusion analysis, scripting with Python or PowerShell, and familiarity with EDR or SIEM platforms like CrowdStrike or SentinelOne, as these are critical for the role.

• Apply through multiple channels including CyberMaxx's corporate careers page, LinkedIn, and other job boards to maximize your application visibility for the DFIR Analyst position.

• Connect with CyberMaxx's cybersecurity or incident response team members on LinkedIn to gain insights and express your interest; use ice breakers like referencing recent CyberMaxx blog posts, industry events, or asking about their approach to crisis incident management.

• Optimize your resume for ATS by incorporating keywords from the job description such as 'incident response,' 'memory analysis,' 'Active Directory,' 'Python scripting,' 'intrusion analysis,' and 'EDR platforms' to ensure it passes initial automated screenings.

• Utilize Jennie Johnson's Power Apply feature to automate application submissions, tailor your resume for ATS compatibility, identify multiple application platforms, and find relevant LinkedIn contacts, saving you valuable time during your job search.