Senior DFIR
Summary
Leads digital forensics and incident response investigations — Windows/Linux disk and memory forensics, ransomware/malware analysis, evidence acquisition, timeline and root cause analysis — while writing DFIR playbooks, supporting customer engagements, and mentoring juniors. Key tools: Volatility, KAPE, FTK Imager, Autopsy, Binalyze AIR.
Role: Senior DFIR Consultant
Job Summary
We are looking for an experienced DFIR professional with strong hands-on expertise in digital forensics, incident response, and malware investigation. The candidate will lead forensic investigations, support customer engagements, and help establish DFIR processes and capabilities.
Key Responsibilities
Conduct Windows and Linux forensic investigations, including disk and memory forensics.
Investigate ransomware, malware infections, data breaches, and security incidents.
Perform evidence acquisition, preservation, timeline analysis, and root cause analysis.
Conduct malware analysis and threat hunting.
Prepare detailed investigation reports and maintain chain-of-custody documentation.
Develop DFIR SOPs, playbooks, and investigation procedures.
Support customer engagements and mentor junior team members.
Required Skills
Good hands-on DFIR experience.
Strong knowledge of Windows/Linux forensics and memory analysis.
Experience with incident response, malware analysis, and log analysis.
Hands-on experience with tools such as Volatility, KAPE, FTK Imager, Autopsy, and Binalyze AIR.
Knowledge of MITRE ATT&CK and incident response methodologies.
Preferred Certifications
GIAC Certified Forensic Analyst (GCFA)
EC-Council Certified Hacking Forensic Investigator (CHFI)
GIAC Certified Incident Handler (GCIH)