Analyste Forensique Cyber Expérimenté(e) – Réponse à Incident (Digital Forensics and Incident Response) - Toulouse
Core
Senior Digital Forensics and Incident Response (DFIR) analyst conducting advanced investigations on critical security incidents including ransomware, APTs, and data exfiltration.
Role type
Senior IC digital forensics and incident response analyst
Builds
Technical forensic reports, executive summaries, and DFIR playbooks/tools
Domain
Cybersecurity / Digital Forensics
Required skills
Digital forensics investigation, memory analysis, disk imaging, log analysis, network artifact analysis, threat intelligence, playbook development, scripting (Python, PowerShell), SIEM log analysis, MITRE ATT&CK framework, NIST IR framework
Preferred skills
GCFA, GCFE, GCIH, CHFI certifications
Technologies
Windows, Linux, macOS, Azure, AWS, FTK, Splunk, Volatility, Wireshark
Responsibilities
Respond rapidly to major compromises (ransomware, APT, data exfiltration), collect and preserve digital evidence (disks, memory, logs, network artifacts), produce detailed technical reports and executive summaries, develop DFIR playbooks and tools, monitor emerging threats and contribute to threat intelligence, collaborate with SOC, network, and cloud teams
Seniority
Senior, hands-on IC