Associate (Forensics Lead), Incident Response
Core
Forensic investigations and technical incident response for complex cyber incidents, supporting clients from first contact through recovery.
Role type
Senior IC incident response forensics lead
Builds
Incident response strategies, forensic evidence, system recovery, and root cause analyses
Domain
Cyber security, digital forensics, incident response
Required skills
Windows forensics, network forensics, malware analysis, log analysis, incident triage, system recovery, threat actor TTPs, PowerShell, firewall management, virtualization (ESXi, Hyper-V), EDR solutions
Preferred skills
Linux/MacOS forensics, incident containment, GCFE/GCFA/GCIH/GNFA certifications, additional language proficiency (Malay, Tamil, Mandarin, Cantonese, Vietnamese)
Technologies
Windows, SCCM, PowerShell, ESXi, Hyper-V, EDR, DNS, firewalls
Responsibilities
Conduct forensic investigations on Windows, Linux, and MacOS systems; oversee host- and network-based incident response; participate in 24x7x365 on-call rotation; develop and share domain expertise; create tailored response strategies
Seniority
Senior, hands-on IC
