Digital Forensics and Incident Response (DFIR) Senior Associate
Core
Manage security engagements, analyze forensic data, and investigate cyber incidents for enterprise clients.
Role type
Senior Associate Digital Forensics and Incident Response (DFIR) Consultant
Builds
Incident response programs, forensic evidence reports, and security posture improvements
Domain
Cybersecurity & Privacy
Required skills
Digital Forensics, Incident Response, Network Analysis, Memory Analysis, Endpoint Analysis, Log Analysis, Packet Capture Analysis, Threat Hunting, Policy Evaluation, Gap Analysis
Preferred skills
Cloud platform expertise (AWS, GCP, Azure), Programming (Python, Perl, C/C++, C#, PowerShell, BASH), Advanced Certifications (GCIH, GREM)
Technologies
EnCase, FTK, X-Ways, Sleuthkit, UFED, Cortex, Carbon Black, Crowdstrike, Wireshark, TCPdump, SIEM tools
Responsibilities
Manage security engagements from inception to completion; Examine client policies to identify patterns and gaps; Recommend actions to mature incident response programs; Provide evidence and perform data collection/analysis; Perform triage and examine digital media; Analyze Windows & Unix systems for compromise; Hunt threat actors in enterprise networks and cloud; Analyze packet captures.
Seniority
Senior, hands-on IC