Digital Forensics and Incident Response, Senior Manager

Booz Allen Hamilton•Sacramento, CA

13h•Onsite

About The Position

Identify and pursue opportunities during DFIR engagements to connect clients with Booz Allen’s cybersecurity products and advisory services, translating incident findings into broader client needs and expanding relationships through strategic account coordination. Serve as a trusted advisor to senior stakeholders, fostering long-term cyber resilience and growth by developing repeatable playbooks, coaching practitioners, and tracking performance metrics to drive measurable revenue and service expansion. Direct the strategic direction, operational performance, and client delivery for multiple incident response teams, overseeing complex investigations and ensuring alignment with legal, regulatory, and business requirements. Serve as a senior advisor during high-severity incidents, communicating with executives, legal counsel, insurance carriers, and other stakeholders. Lead and develop team leads and senior personnel, managing career development, performance, and disciplinary actions while promoting a culture of accountability and technical excellence. Maintain relationships with cyber insurance carriers, breach counsel, law firms, and corporate clients, supporting new business opportunities and practice growth. Ensure compliance with DFIR policies and standards, review significant findings and deliverables, and represent the organization at industry events.

Requirements

7+ years of experience in digital forensics, incident response, cybersecurity investigations, or cyber risk
3+ years of experience leading incident response teams or forensic investigation teams
Experience managing multiple teams, team leads, senior technical personnel, or a geographically distributed workforce, including with employee development, career management, performance management, and disciplinary actions
Experience leading complex cybersecurity incidents involving executive, legal, insurance, or regulatory stakeholders and serving as a senior advisor during ransomware, data breach, business email compromise, or insider threat
Experience developing and maintaining client relationships within the cyber insurance, legal, incident response, or cybersecurity markets
Experience connecting clients with relevant cybersecurity products, platforms, and advisory services
Knowledge of digital forensic methodologies, evidence preservation, chain of custody, investigative documentation, and defensible reporting
Ability to identify new opportunities, expand client relationships, contribute to business growth, and communicate technical findings and business risks to executives, boards, legal counsel, insurers, and senior stakeholders
Ability to travel up to 25% of the time and work outside standard business hours as required
Bachelor’s degree in Cybersecurity, Computer Science, Business Administration, or Digital Forensics

Nice To Haves

Experience building or expanding a digital forensics or incident response practice
Experience working with cyber insurance carriers, claims teams, insurance brokers, breach counsel, and insured organizations
Experience with pipeline management, utilization, profitability, and engagement economics
Experience negotiating statements of work, master services agreements, retainers, pricing structures, or preferred-provider arrangements
Experience developing thought leadership, executive briefings, conference presentations, or market-facing content
Ability to demonstrate client relationships and develop and grow a portfolio of business
Master’s degree in Cybersecurity, Computer Science, Business Administration, Digital Forensics, or a related field
CISSP, CISM, GCFA, GCIH, GREM, GNFA, EnCE, CFCE, CCE, or similar Certification

Responsibilities

Identify and pursue opportunities during DFIR engagements to connect clients with Booz Allen’s cybersecurity products and advisory services.
Translate incident findings into broader client needs and expanding relationships through strategic account coordination.
Serve as a trusted advisor to senior stakeholders, fostering long-term cyber resilience and growth by developing repeatable playbooks, coaching practitioners, and tracking performance metrics to drive measurable revenue and service expansion.
Direct the strategic direction, operational performance, and client delivery for multiple incident response teams, overseeing complex investigations and ensuring alignment with legal, regulatory, and business requirements.
Serve as a senior advisor during high-severity incidents, communicating with executives, legal counsel, insurance carriers, and other stakeholders.
Lead and develop team leads and senior personnel, managing career development, performance, and disciplinary actions while promoting a culture of accountability and technical excellence.
Maintain relationships with cyber insurance carriers, breach counsel, law firms, and corporate clients, supporting new business opportunities and practice growth.
Ensure compliance with DFIR policies and standards, review significant findings and deliverables, and represent the organization at industry events.