Cybersecurity Incident Response & Digital Forensics (DFIR) Specialist
Core
Lead cybersecurity incident response and digital forensic investigations to preserve evidence, determine attack scope, and ensure regulatory compliance.
Role type
Senior IC DFIR specialist
Builds
Incident response playbooks, forensic reports, and RCA documentation
Domain
Cybersecurity / Digital Forensics
Deliverable
client delivery
Required skills
incident investigation, root-cause analysis, digital evidence handling, chain of custody, disk/memory/network/malware analysis, SIEM/EDR usage, NIST incident response, MITRE ATT&CK
Preferred skills
CISSP, GCIA, GSEC, GCIH, CISM
Technologies
EnCase, FTK, Volatility, Autopsy
Responsibilities
Investigate incidents and determine attack scope, impact, entry vectors, and affected assets; Perform containment, eradication, recovery, and post-incident review; Collect, preserve, and analyze digital evidence; Develop and maintain incident-response procedures and playbooks; Prepare technical and executive incident reports and RCA reports; Coordinate with internal teams to ensure compliance with NCA requirements.
