Manager - Digital Forensics

Job Title: Manager - Digital Forensics
Job Level: Middle Management
Department: Digital Forensics & Incident Response (DFIR)
Location: Gurgaon
Position Type: Full Time
Travel Required: Yes
Salary Range: Open - As per industry standards
Reports To: Director - DFIR
Role Summary:
As a Manager - Digital Forensics, you will lead and manage complex digital forensic and cyber investigations, with a strong focus on client communication, high-quality reporting, and team supervision. This role demands a balanced mix of forensic expertise, leadership, and exceptional communication skills. You will oversee engagements involving data breaches, IP theft, cyber fraud, insider threats, and more across varied digital environments.
Key Responsibilities:
- Lead and manage digital forensics investigations involving endpoints, servers, mobile devices, cloud environments, and network log analysis.

- Oversee forensic imaging, evidence acquisition, chain-of-custody protocols, and in-depth artifact analysis using tools such as EnCase, FTK, Intella, Autopsy, Cellebrite, Magnet AXIOM, Macquisition, and Falcon NEO.
- Support investigations involving data exfiltration, IP theft, malware, insider threats, and other cyber incidents.
- Manage and mentor a team of forensic analysts to ensure consistent quality, adherence to process, and timely delivery.
- Act as the client-facing lead, effectively managing communications with legal teams, compliance, and law enforcement during sensitive engagements.
- Review, refine, and finalize high-quality forensic reports, timelines, and findings tailored for legal, regulatory, and business audiences.
- Perform root cause analysis and post-incident reviews across security incidents such as ransomware, phishing, and unauthorized access.
- Coordinate across internal departments to ensure seamless and efficient delivery of DFIR services.
- Contribute to business development by supporting proposal creation, client discussions, and case study preparation.
- Stay current on emerging cyber threats, forensic methodologies, legal standards, and regulatory expectations.
Qualifications & Experience:
- Graduate/Postgraduate in Computer Science, Cybersecurity, Forensic Science, or a related field.
- Relevant certifications such as CHFI, GCFA, EnCE, CCE, CFE, CEH are highly preferred.
- Minimum 8 years of experience in digital forensics and incident response, with at least 4 years in a leadership/managerial role.
- Proficient in industry-standard forensic tools including FTK, EnCase, Intella, Magnet AXIOM, Autopsy, Cellebrite, and Mac acquisition tools like Falcon NEO and Macquisition.
- Familiarity with EDR/SIEM platforms such as Splunk, CrowdStrike, or SentinelOne is an added advantage.
- Deep understanding of file systems (NTFS, HFS, APFS), Windows/Mac artifacts, log analysis, and chain-of-custody protocols.
- Experience in supporting legal processes, audits, or regulatory investigations related to cybercrime or data breaches.
Preferred Skills:
- Excellent communication and interpersonal skills; must be confident in dealing directly with clients, including CXOs and legal teams.
- Strong forensic report-writing abilities, capable of translating technical findings into clear, concise narratives for non-technical audiences.
- Ability to handle high-pressure investigations with maturity, discretion, and a solution-oriented mindset.
- Proven leadership in managing forensic engagements and handling multiple investigations simultaneously.
- High level of professional integrity, discretion, and attention to detail, especially when dealing with sensitive data.
Additional Requirements:
- Willingness to travel for client engagements or investigations as required.
- Availability to support high-priority incidents during off-hours or weekends, if necessary.