Cyber - Digital Forensics & Incident Response Analyst (DFIR) - SDS
Core
Conduct complex Digital Forensics & Incident Response (DFIR) investigations, including advanced compromises, to determine attack vectors and scope.
Role type
Digital Forensics & Incident Response Analyst
Builds
Incident response capabilities and forensic evidence for the Global CERT
Domain
Cybersecurity / Financial Services
Required skills
Digital Forensics & Incident Response (DFIR), Windows forensics, Linux forensics, SIEM analysis, Incident management, Technical reporting
Preferred skills
EnCase, Cellebrite, Nuix, CompTIA Security+, CySA+, eCIR, Blue Team Level 1/2
Technologies
Windows, Linux, MacOS, Android, Splunk, Crowdstrike, QRadar
Responsibilities
Participate in complex DFIR investigations including advanced compromises; Acquire and analyze forensic artifacts across platforms to determine attack vectors; Search, correlate, and analyze logs in SIEM environments; Prepare technical and executive reporting; Identify and propose improvements to risk and technological controls.
Seniority
Mid-level, hands-on IC