DFIR Engagement Manager

About the role

SentinelOne is seeking a DFIR Engagement Manager to act as the critical bridge between DFIR analysts, customers, and internal stakeholders during high‑stakes investigations. You will own the full lifecycle of incident response engagements, from intake and scoping through final delivery, ensuring the highest standards of quality and client focus.

Key responsibilities

• Oversee active DFIR investigations from intake to delivery, guaranteeing timely, high‑quality deliverables and strict adherence to incident‑response SOPs.
• Lead business development and scoping activities, including requirements gathering, contract development, and communication with customers, breach counsel, and cyber‑insurance carriers.
• Direct analytical focus, validate team findings, and manage escalations to keep technical workstreams on track.
• Allocate resources appropriately and ensure investigations are properly scoped and resourced.
• Maintain clear communication channels with internal teams and external partners throughout each engagement.

Required profile

• Relentlessly curious with a commitment to continuous learning, especially in AI‑driven security tools.
• Strong project‑management and communication leadership skills.
• Ability to operate under pressure in high‑stakes, time‑critical investigations.
• Experience guiding forensic and incident‑response teams while maintaining investigative momentum.

Required skills

• Digital Forensics
• Incident Response