Director Digital Forensics & Incident Response

• Own and advance all DFIR operations in alignment with MassMutual's cybersecurity strategy and regulatory obligations.
• Establish strategic priorities develop long-term capability roadmaps and champion continuous program improvement.
• Partner with SOC Threat Intelligence and Offensive Security leadership to ensure cohesive enterprise-wide threat defense.
• Oversee DFIR metrics staffing plans and budget requirements while guiding strategic investment decisions.
• Drive Incident Response Excellence
• Oversee the response to cybersecurity events and major incidents ensuring appropriate analysis prioritization escalation and communications.
• Maintain and continually enhance standardized incident handling processes to improve consistency and reduce response times.
• Ensure high-quality executive communication including incident impact summaries and recommended actions for senior leadership.
• Strengthen Communication & Enterprise Collaboration
• Build and maintain relations with key stakeholders from across the company (to include Law Compliance HR and other security teams).
• Serve as the escalation point for cross-functional coordination during investigations and major events.
• Ensure timely risk-aware decisions and clear communication of incident impacts and recommended actions.

• Continually evaluate and enhance forensic toolsets processes and methodologies across endpoint cloud and network environments.
• Establish and enforce evidence handling standards including collection preservation and chain-of-custody practices.
• Drive automation to increase analyst efficiency improve data quality and streamline response workflows.
• Build and Inspire a High-Performing Global Team
• Lead mentor and develop a geographically distributed team of DFIR analysts and managers.
• Create a culture of inclusion innovation continuous improvement and professional growth consistent with MassMutual's values.
• Support ongoing skill advancement through hands-on exercises simulations certifications and cross-training opportunities.

• Bachelor's Degree or equivalent professional experience
• 8+ Years of experience in cybersecurity operations including digital forensics incident response threat intelligence cyber investigations detection engineering or related domains-with demonstrated impact improving organizational capabilities.
• 2+ years of experience leading large globally distributed technical teams in high-pressure operational environments.
• Flexibility to support off hours and weekends on call

• Master's degree in cybersecurity or related discipline.
• Relevant certifications such as CISSP GIAC CISM OSCP or similar.
• Experience collaborating with stakeholders such as Audit Compliance Risk Management and external regulators.
• Passion for continuous learning and staying current with emerging threats forensic techniques and adversary behaviors.
• Experience leading global DFIR or SOC teams.
• Familiarity with cloud-based forensic and detection technologies (AWS Azure GCP).
• Experience maturing DFIR programs through automation tooling modernization and data-driven improvements.
• Proven experience leading multidiscipline security teams and driving operational strategy in complex cybersecurity environments.
• Deep understanding of incident response best practices and experience coordinating responses to both small-scale and large-scale incidents.
• Strong background in endpoint and network forensics log analysis and forensic tooling.
• Excellent communication and executive reporting skills including the ability to translate technical analysis for non-technical audiences.
• Demonstrated success developing cybersecurity playbooks workflows and security exercises.
• Experience operating in regulated risk-driven environments with the ability to communicate technical and analytic outcomes to non-technical audiences.

• Clear areas of ownership and accountability with work that connects directly to company and customer outcomes
• A collaborative environment where perspectives are welcomed
• Access to learning development and internal networks that support continuous growth and skill-building over time
• Employee-led communities and forums that foster connection learning and inclusion across the organization
• A culture grounded in integrity responsibility and stewardship-supported by a company with a strong legacy and a future-focused mindset

What We Do

Since 1851 MassMutual’s commitment has always been to help people protect their families support their communities and help one another. This is why we want to inspire people to Live Mutual. We’re people helping people. Together we’re stronger.

Why Work With Us

MassMutual has the financial security and stability of a 170+ year old company with the culture and energy of a startup. We work every day with the customer front of mind to build the best digital experience in the industry.

Gallery