Key Responsibilities:
Lead, mentor, and manage the DFIR team.
Oversee incident response activities, including triage, containment, eradication, and remediation.
Lead forensic investigations to identify the root cause of security breaches.
Handle complex security incidents, including APTs and ransomware attacks.
Conduct malware analysis, reverse engineering, threat hunting, and detection engineering.
Develop incident response strategies, playbooks, tools, scripts, and detection rules.
Work closely with clients and stakeholders during critical security incidents.
Provide technical leadership and guidance to junior team members.
What We're Looking For:
10+ years of experience in Information Security / Cybersecurity.
2–3+ years in a Senior or Lead DFIR role, with team leadership or mentoring experience.
Strong expertise in Digital Forensics, Incident Response, Malware Analysis, and Threat Detection.
Hands-on experience handling APT and ransomware investigations.
Strong knowledge of network security, TCP/IP, Windows/Linux forensics, and security technologies.
Proficiency in Python, PowerShell, or Bash scripting.
Experience with reverse engineering and YARA, Snort, or Sigma rule development.
At least 2 relevant certification: CISSP, GCIA, GCIH, GCFA, GCFE, GREM, or OSCP.