IR & Forensics Researcher

Job Overview

We are looking for an Incident Response (IR), Digital Forensics & Malware Analysis Researcher to join our cybersecurity team. This is a full-time, on-site position based in central Israel. The selected candidate will be responsible for managing cyber incidents from end to end — including detection, investigation, containment, recovery, and postincident system hardening. The role requires strong forensic, programming, and networking skills, along with hands-on experience in both cloud and on-prem environments.

All of the following qualifications are mandatory:

• Minimum 2 years of hands-on experience in DFIR and MA.

• Proven experience in both cloud and on-premises environments.

• Demonstrated ability to manage cybersecurity incidents end-to-end, including:

o Initial detection and triage

o Digital evidence collection and investigation

o Incident containment and eradication

o System hardening and lessons learned documentation

• Strong proficiency in Python programming and experience with automation scripting

• Proven ability to author clear, structured, and technically accurate documentation and reports.

• Deep understanding of networking protocols, network architectures, and operating systems (Windows/Linux)

• Experience working with network and endpoint protection tools such as EDR, NDR, firewalls, and Fast IR tools.

• Experience in both threat hunting and malware analysis workflows

• Working knowledge of frameworks such as MITRE ATT&CK and NIST IR guidelines

• One of the following certifications (minimum one required):

o GIAC Certified Forensic Analyst (GCFA)

o GIAC Network Forensic Analyst (GNFA)

o GIAC Advanced Smartphone Forensics (GASF)

o EC-Council CHFI o Offensive Security - OSCP\OSTH\OSIR\OSEP

o Bachelor's degree in Computer Science or equivalent