DFIR Analyst

Responsibilities

• Lead and participate in all phases of the incident response lifecycle, including preparation, detection and analysis, containment, eradication, recovery, and post incident activity.
• Conduct in-depth digital forensic investigations to identify the root cause, scope, and impact of security incidents.
• Collect, preserve, and analyze digital evidence from various sources (e.g., endpoints, networks, cloud environments).
• Utilize forensic tools and techniques to reconstruct events, identify attacker methodologies, and attribute threats.
• Develop and implement incident containment and eradication strategies.
• Prepare detailed incident reports, including technical findings, remediation recommendations, and lessons learned.
• Collaborate with internal teams (e.g., IT, legal, compliance) and external partners (e.g., law enforcement, third-party vendors) during incident response efforts.
• Contrib...