Associate Director, Incident Response and Forensics

Job Overview CSL is looking for a highly technical and detail‑oriented leader in the DFIR space that specializes in digital forensics, malware analysis, threat detection, and incident response activities. As the leader of our Digital Forensics and eDiscovery team, you will support and grow a global team, own the strategy and direction for people, processes, and technology, and partner deeply with Security Operations, Data Loss Prevention, and Threat Intelligence teams to help CSL defend against cyber attacks. Responsibilities Lead a global team of digital forensics, incident response, and eDiscovery analysts to apply security incident handling processes: Prepare, Identify, Contain, Eradicate, Recover from cybersecurity events. Work closely with the Director of Security Operations to develop and implement a cybersecurity threat analysis structure of common attack techniques to evaluate an attacker’s spread across CSL systems, platforms, and networks. Develop and maintain a continuous upskilling program to increase team skills and capability maturity. Identify and implement tools to determine attack types and select appropriate defenses and response tactics. Derive Indicators of Compromise (IOCs) from malicious activity to strengthen incident response and threat detection. Conduct in‑depth forensic analysis of various operating systems. Examine traffic using common network protocols to identify patterns or specific actions requiring investigation. Detect and hunt for adversary TTPs across the enterprise environment. Partner with Compliance, Legal, Privacy, and other teams to perform internal eDiscovery investigations. Lead and supervise teams, fostering trust, encouraging diverse views, coaching staff, and providing timely feedback. Participate in hiring, growth, and development of junior incident response staff in threat hunting, forensic analysis, eDiscovery, litigation hold, incident resolution, and return to operations. Mentor and direct incident response project managers and their teams, modeling expected project management behaviors and improving project results. Qualifications College degree in a related technical subject or equivalent experience in cybersecurity and manufacturing; advanced degree (MS) preferred. Project management certification or training desirable; CISSP, CISM, CISO, GIAC‑GCED, GIAC‑GCIH, GIAC‑CFE preferred. 8+ years of experience leading global, multi‑functional Digital Forensics/Cybersecurity Incident Response teams (bio‑pharma manufacturing experience preferred but not mandatory). Strong leadership, consultative, communication, and conflict management skills. Ability to train, mentor, and develop project managers; experience managing in a matrix environment. Analytical skills to evaluate complex problems and communicate findings to senior management. Strategic planning, quantitative, and decision‑analysis capabilities. Project management and integration skills, including budgeting and cross‑functional coordination. Proficiency with enterprise applications, Microsoft suite, and project management software. Experience in the biopharmaceutical industry and crafting enterprise incident response programs for a global company is desired. Equal Opportunity Statement CSL is an Equal Opportunity Employer. If you are an individual with a disability and need a reasonable accommodation for any part of the application process, please click here. #J-18808-Ljbffr