International Contract Bench, Incident Response (DFIR)
Core
Support high-impact digital investigations involving sophisticated cyber threats and real-world security incidents by analyzing live response data and forensic artifacts.
Role type
Contract Incident Response (DFIR) professional
Builds
High-quality investigations for cases ranging from ransomware to nation-state threats
Domain
Cybersecurity, Digital Forensics, Incident Response
Deliverable
client delivery
Required skills
Incident response, digital forensics, network analysis, cloud-native investigations, threat intelligence, Windows/macOS/Linux forensics
Preferred skills
Experience with AWS, GCP, Azure, SaaS applications, business email compromise investigations
Technologies
Windows, macOS, Linux, AWS, GCP, Azure, SaaS
Responsibilities
Perform incident response and digital forensic investigations involving active threat activity and security breaches; Analyze live response data and forensic artifacts to identify malicious activity; Investigate Windows, macOS, and Linux environments; Analyze business email compromise and account takeover incidents; Conduct network analysis to identify suspicious activity; Support investigations across cloud-native environments; Apply threat intelligence to investigative work; Share investigative perspectives to strengthen the incident response practice