Digital Forensics & Incident Response (DFIR) Analyst

Job Description - Digital Forensics & Incident Response (DFIR) Analyst (2400017I)

We are seeking a skilled and motivated individual to join our cybersecurity team as a Digital Forensics & Incident Response (DFIR) analyst. In this role, you will be responsible for conducting digital forensic investigations, managing, and responding to security incidents. You will play a critical role in identifying, containing, and remediating security incidents.

Responsibilities

• Respond promptly to security incidents or escalated alerts, analyze incident data, and provide timely updates of findings, root causes and recommended remediation measures.
• Collect, preserve and analyze digital evidence using industry-standard tools and techniques to identify source, scope and impact of incident.
• Collaborate with cross functional teams to develop incident response plans, including containment and remediation strategies.
• Develop and maintain incident response playbooks to ensure effective and consistent response to security incidents.
• Develop and manage current knowledge of tools and best-practices in breach investigation and forensics.
• Support in performing proactive threat hunting activities to uncover security threats, vulnerabilities or gaps within the environment.
• Stay updated with the latest trends and techniques in digital forensics, incident response and threat hunting, and actively share knowledge within the team.
• Develop forensic and investigative reports.

Qualifications

• 5 or more years of experience in Digital Forensics Incident Response (DFIR)/ Threat Hunting or a related field.
• Strong knowledge of digital forensics principles, tools and methodologies.
• Familiarity with incident response frameworks.
• Familiarity with threat hunting techniques, tools and methodologies.
• Strong analytical and problem-solving skills with the ability to think critically and adapt to rapidly evolving situations.
• Certified in related domains, if possible/preferred:
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Forensics Analyst (GCFA)
• GIAC Certified Network Forensics Analyst (GNFA)