Senior Cyber Defense & Offensive Security Specialist

Job Title: Senior Cyber Defense & Offensive Security Specialist (Incident Response & Threat)

Location: Dallas, TX (Remote)

Job Description:

Threat Research Advisory team is seeking a highly skilled and versatile cybersecurity professional to lead and execute advanced Digital Forensics & Incident Response (DFIR), Offensive Security Testing, and Cyber Threat Intelligence (CTI) operations. This role requires deep technical expertise, hands-on execution capability, and the ability to operate in high-pressure incident environments while supporting proactive security initiatives.

The ideal candidate will bring a blend of forensic investigation, penetration testing, threat intelligence analysis, and automation development, with exposure to legal discovery processes and executive-level cyber risk scenarios.

Key Responsibilities

1. Digital Forensics & Incident Response (DFIR)

• Manage and execute incident response engagements for rapid response retainers, including:

o Unauthorized access incidents

o Malware outbreaks and advanced threats

o Cyber extortion and ransomware attacks

• Perform:

o Digital evidence acquisition and forensic analysis

o Deleted data recovery and memory analysis

o Malware reverse engineering

• Operate under legal frameworks, ensuring alignment with Attorney Work Product and legal privilege requirements

2. Offensive Security & Red Team Operations

• Conduct comprehensive penetration testing and adversary simulations, including:

o Internal and external network testing

o Web, cloud, mobile (iOS), and thick client assessments

o Wireless infrastructure testing

• Execute exploitation techniques such as:

o SQL injection, cross-site scripting (XSS)

o Privilege escalation and credential attacks

• Lead Social Engineering campaigns:

o Phishing, smishing, pre-texting

• Perform Physical Security Assessments:

o Facility access testing

o RFID cloning

o USB payload deployment

3. Cyber Threat Intelligence (CTI) & Threat Hunting

• Monitor and analyze intelligence across:

o Surface, deep, and dark web environments

• Identify risks such as:

o Stolen intellectual property

o Brand impersonation and typosquatting

o Credential leaks and compromise indicators

• Develop and operationalize:

o Automation workflows and GenAI-driven threat hunting tools

o IOC enrichment pipelines and intelligence correlation models

4. CSIRT Operations, Labs & E-Discovery

• Support and operate 24/7 CSIRT functions, including:

o Alert triage and incident containment

• Deploy and manage:

o Network Telemetry Analysis (NTA) sensors

o Full packet capture solutions

• Execute E-Discovery and forensic data processing, including:

o Predictive coding models

o Handling and hosting Electronically Stored Information (Client)

o Using platforms such as Relativity and Nuix

5. Incident Preparedness & Executive Protection

• Develop and maintain:

o Incident Response Plans (IRPs)

o Decision matrices and escalation protocols

o Executive reporting frameworks

• Conduct:

o Ransomware simulations and breach exercises

o Executive tabletop scenarios

• Deliver Executive Identity Protection (EIP) services:

o Removal of sensitive personal data from public sources and data brokers

Required Skills & Experience

Technical Expertise

• Proven experience in:

o Multi-vector penetration testing (Network, Web, Cloud, Mobile, Wireless, Physical)

o DFIR and compromise assessments

o Malware analysis and reverse engineering

• Strong proficiency with tools such as:

o Wireshark, Nmap, Recorded Future (or equivalent CTI platforms)

• Experience in:

o OSINT collection and analysis

o Network telemetry analysis

Automation & Development

• Strong scripting and development skills in:

o Python

o Linux-based environments

• Experience building:

o Security automation tools

o Agentic workflows and bot-driven intelligence pipelines

Forensics & Legal Discovery

• Hands-on experience managing:

o Electronically Stored Information (Client)

o Legal discovery workflows

• Familiarity with:

o Relativity, Nuix, or similar platforms

Certifications

Preferred certifications include:

• Offensive Security Certified Professional (OSCP)
• Certified Ethical Hacker (CEH)
• GIAC Security Essentials (GSEC)
• Additional DFIR or CTI certifications are a plus

Soft Skills & Attributes

• Ability to operate in high-pressure incident scenarios
• Strong analytical and investigative mindset
• Excellent stakeholder communication, including interaction with legal counsel and executives
• Ability to bridge offensive, defensive, and intelligence domains
• Strong documentation and reporting skills

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.