Lead – Digital Forensics & Incident Response; DFIR

We are looking for a hands-on DFIR professional with strong experience investigating complex cybersecurity incidents and performing digital forensic analysis.

• 5+ years in DFIR / Incident Response / Cyber Investigations
• End-to-end handling of ransomware, malware, unauthorized access, insider threats & data breaches
• Disk, memory & endpoint forensic analysis
• Forensic acquisition, evidence preservation & chain of custody
• Tools such as EnCase, FTK, Velociraptor, Volatility, KAPE, Autopsy, Wireshark
• Incident timeline reconstruction, Root Cause Analysis (RCA) & forensic reporting
• Cloud investigations across M365 / Azure / AWS / GCP preferred
• Exposure to Power Shell, Python, KQL, SPL or Bash

Preferred Certifications: GCFA, GCIH, GCIA, CHFI, EnCE, CFCE, CISSP, CISM, SC-200 or equivalent.

This is not a pure SOC monitoring role. Strong hands-on Digital Forensics & Incident Response experience is essential.