DFIR
Posted Jun 28 · 0 applicants
Saving, applying or scoring takes a few seconds to set up your free account.
The role in plain words
This role is part of the digital forensics and incident response team, focusing on responding to cyber incidents and crises for clients. Day-to-day activities include performing real-time incident response, conducting digital forensics investigations in cloud and on-premise environments, and analyzing malicious tactics and techniques. The position also involves proactive threat hunting and collaborating with internal red teams and external clients.
- 2-3 years of experience as a DFIR team member
- Experience with performing digital forensics in a cloud environment
- Experience with performing digital forensics of Windows-based and/or Linux-based platforms, network forensics, and analysis
- Thorough understanding of threat hunting models, as well as cyber threat intelligence, including TTP and IoCs extraction and mapping
- Experience with research and data analysis of large DBs via Splunk, Elasticsearch, SQL, or VQL
Extracted from the job description · kept up to date automatically
Who this suits
This role suits professionals with 2 to 3 years of DFIR experience who have a strong understanding of threat hunting models and experience conducting forensics in cloud, Windows, or Linux environments. It is less ideal for those without experience analyzing large databases or those lacking strong English communication skills.
Full job description
Original listing · kept for referenceCYE's DFIR team is responsible for responding to our clients' cyber incidents and crises.
Our group is expanding. If you see yourself in the front line of the cybersecurity domain as a digital forensic and incident response (DFIR) talent, your place is with us. As a DFIR team member, you will participate in hands-on security research and investigations, helping our customers understand and mitigate cyber threats and attacks.
Responsibilities
• Perform incident response lifecycle and real-time activities, including detection and analysis, containment and eradication, and recovery
• Perform incident response in a cloud environment (Azure, AWS etc.)
• Perform digital forensics investigations
• Research and analyze tactics, techniques, and procedures (TTPs) used by malicious actors
• Perform hunt-evil and find-evil activities for proactively detecting attacks
• Work closely with our in-house red team, CTI, and cyber architect teams
• Work closely with worldwide companies, CISOs, and technology experts
Qualifications
• 2-3 years of experience as a DFIR team member
• Experience with performing digital forensics in a cloud environment
• Experience with performing digital forensics of Windows-based and/or Linux-based platforms, network forensics, and analysis
• Thorough understanding of threat hunting models, as well as cyber threat intelligence, including TTP and IoCs extraction and mapping
• Experience with research and data analysis of large DBs via Splunk, Elasticsearch, SQL, or VQL
• Strong understanding of targeted attacks; able to create customized tactical remediation plans
• Good written and verbal English communication skills
About Us
Cye helps security and risk leaders gain a clear, defensible view of their cyber exposure, grounded in financial impact and real-world attack paths. By continuously quantifying exposure and validating it in context, organizations can establish a strong baseline, prioritize decisions with confidence, and track measurable reduction over time.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Questions about this role
- This listing did not state a salary. We only show pay when the employer publishes it.
- 2-3 years of experience as a DFIR team member, Experience with performing digital forensics in a cloud environment, Experience with performing digital forensics of Windows-based and/or Linux-based platforms, network forensics, and analysis, Thorough understanding of threat hunting models, as well as cyber threat intelligence, including TTP and IoCs extraction and mapping, Experience with research and data analysis of large DBs via Splunk, Elasticsearch, SQL, or VQL