Digital Forensics and Incident Response; DFIR Professional

Position Overview

We are seeking a highly skilled and experienced Digital Forensics and Incident Response (DFIR) Professional to join our cybersecurity team. The DFIR Professional will be responsible for investigating cybersecurity incidents, performing digital forensic analysis, and developing and implementing incident response strategies. This role is critical in minimizing the impact of security breaches and strengthening our organization’s overall security posture.

• Lead and participate in all phases of the incident response lifecycle, including preparation, detection and analysis, containment, eradication, recovery, and post‑incident activity.
• Conduct in-depth digital forensic investigations to identify the root cause, scope, and impact of security incidents.
• Collect, preserve, and analyze digital evidence from various sources (endpoints, networks, cloud environments).
• Utilize forensic tools and techniques to reconstruct events, identify attacker methodologies, and attribute threats.
• Develop and implement incident containment and eradication strategies.
• Prepare detailed incident reports, including technical findings, remediation recommendations, and lessons learned.
• Collaborate with internal teams (IT, legal, compliance) and external partners (law enforcement, third‑party vendors) during incident response efforts.
• Contribute to the development and improvement of DFIR processes, playbooks, and tools.
• Stay current with the latest threat intelligence, attack techniques, and forensic methodologies.
• Provide training and mentorship to junior team members.

• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, or a related field (or equivalent practical experience).