Qureos Mentor

TechDefence Labs

<div><div><b>Key Responsibilities</b></div><ul><li>
Lead and manage security incident response engagements from detection to remediation.</li><li>
Investigate and analyse security logs from Antivirus, IDS/IPS, Firewalls, Network devices, VPN, and other security tools.</li><li>
Perform forensic examination of RAM, disk images, PCAPs, and various system artifacts.</li><li>
Conduct malware reverse engineering and generate IOCs, signatures, and threat intel reports.</li><li>
Develop and enhance IR scripts, tools, and automated detection content.</li><li>
Research threat actor TTPs and create custom threat hunting rules/playbooks.</li><li>
Work remotely and on-site during live security incidents as required.</li><li>
Develop technical reports and document findings clearly for customers.</li><li>
Conduct knowledge-sharing sessions and train other team members.</li><li>
Stay current with emerging cyber threats and defensive techniques.</li></ul><div></div><div><b><br>
What We&rsquo;re Looking For</b></div><ul><li>
2&ndash;3 years of experience in DFIR / SOC / Cybersecurity Operations</li><li>
Bachelor&rsquo;s degree in IT / Cyber Security / Computer Science / Digital Forensics</li><li>
Hands-on experience with forensic tools: FTK, EnCase, Autopsy / Sleuth Kit, X-Ways Forensics, Magnet AXIOM</li><li>
Excellent communication and incident documentation skills</li><li>
Strong analytical and problem-solving abilities</li></ul><div></div><div><b><br>
Preferred/Good to Have</b></div><ul><li>
Knowledge of SIEM, EDR tools, and MITRE ATT&amp;CK framework</li><li>
Scripting skills (Python, PowerShell, Bash)</li><li>
IR/DFIR certifications: GCFA, GCIH, CHFI, eCTHP, or equivalent</li><li>
Cloud forensics exposure (AWS/Azure/GCP)</li></ul></div>

DFIR Engineer

Join TechDefence Labs and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

TechDefence Labs

ABOUT_COMPANY

DFIR Engineer