DFIR Engineer - Cyber Forensics

As a candidate for this role, you should have a strong background and a minimum of 2 years of experience in computer forensics, cybercrime investigations, or related technical fields, encompassing both public and private sector experience. Your responsibilities will include: - Identifying, containing, mitigating, recovering, and reporting on cybersecurity incidents that impact the enterprise and business. - Continuously enhancing your skills in Digital Forensics, computing, and professional areas. You must be well-versed in computer forensic best practices and industry-standard methodologies for investigating host-based and network analysis. Proficiency in: - Preserving digital evidence from various platforms in a forensically sound manner. - Adhering to globally established standards in digital evidence acquisition and handling. - Understanding digital forensic tools and techniques, especially in supporting internal fraud and employee investigations. As part of the role, you will serve as an initial escalation point for suspected incidents and intrusions, showcasing your expertise with endpoint detection and "live" response tools. Your knowledge should encompass: - Digital forensics on Microsoft Windows, Mac, and Linux systems. - Proficiency with DFIR-related open-source tools, memory, and full disk analysis. - Ability to work both independently and collaboratively during extensive forensic investigations. Experience in incident response forensics and root cause analysis is required, including the preparation of detailed investigation reports covering forensic investigations, breach reports, privacy incidents, and data exposure cases. Attention to detail is key in conducting forensic analysis, coupled with accurate documentation to support investigations. Desirable certifications for this role include CHFI, CIH, CSA, CEH, GSEC, GCIH, GCIA, GCFE, GREM, and GCFA.,