digital forensics analyst

help AG

<div>Help AG is looking for a talented and experienced Incident Response and Forensic Investigation Specialist who will be responsible for off-site and on-site Incident Response activities and customer engagements, leveraging multiple security technologies, guiding and leading customers in the handling of Security Incidents and examining IT and security systems using best-practice digital forensic methods to detect, validate and mitigate IT security related incidents. He / She will join our Cyber Defence team within our Managed Security Services (MSS) business unit. If you have a strong knowledge and interest in incident response and/or digital forensics, this position might be the right one for you. 
Responsibilities:<ul><li>
Lead incident response engagements in unknown environments until all threats are remediated.</li><li>
Develop custom incident response plans tied to specific environments and customer situations.</li><li>
Examinate and analyse logs/data from a broad variety of security technologies, such as Antiviruses, IDS/IPS, Firewalls, Switches, VPNs and other security threat data sources.</li><li>
Perform forensic analysis of different artifacts including RAM, packet captures, logs and disk images.</li><li>
Reverse engineer malicious software and develop signatures and indicators of compromise.</li><li>
Actively develop incident response tools, scripts, and various detection content.</li><li>
Research Red Team techniques, develop custom detection queries, rules, watchlists and other content, and conduct threat hunts.</li><li>
Articulate and execute common Incident Response methods (e.g. SANS).</li><li>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</li><li>
Work on-site as required with clients during Live Security Incidents.</li><li>
Maintain a high degree of awareness of the current threat landscape.</li><li>
Champion excellence and support others in delivering it through active knowledge sharing with team members, writing technical articles for internal knowledge bases, blog posts and reports as required or requested.</li><li>
Create and present customer reports to ensure quality, accuracy and value to the client.</li><li>
Educate and train other Analysts in execution of Incident Response processes and forensic analysis techniques.</li><li>
Perform other essential duties as assigned.</li></ul> 
Qualifications &amp; Skills:<ul><li>
A Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.</li><li>
7+ years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, malware analysis, reverse engineering or threat detection.</li><li>
At least 2-3 years of experience as a Senior or Lead Analyst, or equivalent experience guiding, mentoring and teaching other Analysts/Security Professionals how to handle Security Incidents.</li><li>
Strong background or equivalent experience in four of the following: Security Threat and Event Analysis, Network Security Operations or Engineering, Reverse Engineering, Malware Analysis, Windows/Linux/OSX Forensics, Penetration Testing, Active Directory and Azure Administration.</li><li>
Demonstrate experience in handling Incident Response engagements (APTs and Ransomware) using the SANS Incident Response method (or similar).</li><li>
Should have at least one of the below ACTIVE certifications as a mandatory requirement:</li></ul>
CREST Certified Registered Intrusion Analyst (CRIA) 
GIAC Cloud Forensics Responder (GCFR) 
GIAC Certified Forensic Analyst (GCFA)
CREST Certified Host Intrusion Analyst (CC-HIA) 
CREST Certified Network Intrusion Analyst (CC-NIA)
CREST Certified Incident Manager (CC-IM)
CREST Certified Threat Intelligence Manager (CC-TIM) 
GIAC Reverse Engineering Malware (GREM)<ul><li>
CISSP, GCIA, GCIH, GCFE, OSCP certification would be preferable.</li><li>
Deep TCP/IP knowledge, networking and security product experience.</li></ul><ul><li>
Strong knowledge of Red Team tactics and ability to find adversary traces on Enterprise scale.</li><li>
Rapid development in scripting languages: Python/PowerShell /Bash.</li><li>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</li><li>
Demonstrable experience in accountability for and applying the methods of Incident Response, including adherence to process and direct engagement with stakeholders.</li><li>
Demonstrable experience in analysing and interpreting system, security and application logs.</li><li>
Broad knowledge of the type of events that Firewalls, IDS/IPS and other security related devices produce.</li><li>
Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using custom tools and scripts.</li><li>
Static reverse engineering and analysis of malware written in different languages (X86/X64/C/C#, Go, etc.), signatures and Yara/Snort/Sigma rules development.</li><li>
Knowledge of attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</li></ul>
Benefits:<ul><li> 
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Annual flight tickets.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul> 
About Us: 
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge.
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</div>

Incident Response and Forensic Investigation Specialist (DFIR)

People Process Teck

Job Title: Incident Response / SOC Specialist Work Location: Bangalore Client based in Dublin, Ireland Shift: UK Shift Timings Experience Level: 1&ndash;5 yearsWe are seeking a highly skilled and motivated Incident Response / SOC Specialist to join our cybersecurity team. This role is critical in defending our digital infrastructure against threats by responding to security incidents, conducting forensic investigations, and proactively hunting for potential risks. The ideal candidate thrives under pressure, possesses deep technical expertise, and is passionate about safeguarding organizational assets.Key Responsibilities:<ul><li>Incident Lifecycle Management: Respond to security incidents, perform triage, containment, eradication, and recovery procedures.</li><li>Investigation &amp; Analysis: Conduct root cause analysis and forensic investigations to determine the nature and impact of incidents.</li><li>Threat Hunting: Proactively search for indicators of compromise (IOCs) and advanced persistent threats (APTs) across systems and networks.</li><li>Post-Incident Reporting: Document incident findings, lessons learned, and remediation steps in detailed reports.</li><li>Collaboration: Work closely with SOC analysts, IT teams, and external partners to coordinate response efforts.</li><li>Continuous Improvement: Contribute to playbook development, automation efforts, and enhancement of detection capabilities.</li></ul>Skills &amp; Qualifications:<ul><li>Proven experience in digital forensics, malware analysis, and intrusion detection systems (IDS).</li><li>Strong proficiency in log analysis across various platforms (SIEM, firewalls, endpoints).</li><li>Familiarity with incident response frameworks and methodologies (e.g., NIST, MITRE ATT&amp;CK).</li><li>Hands-on experience with tools such as Wireshark, Volatility, Sysinternals, and endpoint detection &amp; response (EDR) platforms.</li><li>Relevant certifications such as GCIH (GIAC Certified Incident Handler) and GCFA (GIAC Certified Forensic Analyst).</li><li>Ability to work effectively under pressure in high-stakes environments.</li><li>Excellent communication and documentation skills.</li></ul>Job Type: Full-timePay: From &#8377;31,023.01 per monthAbility to commute/relocate:<ul><li>Bengaluru, Karnataka: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>What is your current CTC?</li></ul>What is your expected CTC? What is your notice period?Work Location: In person

Incident Response_SOC Specialist

Trend Micro Inc.

<div><div>When you join Trend, you become part of a unique and diverse global family and you get to work towards a world safe for exchanging digital information.</div><div>
ABOUT TREND MICRO</div><div>
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. For additional information, visit <div>www.trendmicro.com</div></div><div></div><div>
POSITION OVERVIEW</div><div>
The Incident Response Analyst serves as the primary technical responder to active security incidents, interfacing with the Security Operations Center (SOC) and IT infrastructure teams, ensuring the effective containment, eradication, and recovery from cyber threats through rapid forensic analysis and technical mitigation.</div><div></div><div>
PRIMARY RESPONSIBILITIES</div><ul><li>
Oversee all incident response activities reported from detection to incident resolution.</li><li>
Serve as a contact point for suspicious and malicious events escalated by technical support cases, and from the Trend Micro threat hunting efforts and Incident Response Operations.</li><li>
Collect and preserve digital evidence for analysis using traditional DFIR and XDR methods.</li><li>
Analyze different digital forensic artifacts, network traffic, security events to perform root cause analysis and summarize all investigations and conclusions in an incident report.</li><li>
Differentiate between potential intrusion attempts and false alarms, evaluating unknown or suspicious activity and consulting on measures to mitigate their impact on availability and productivity.</li><li>
Review and analyze technical components of malware and other related threat activities in security-related events and different data sources to develop and refine detection criteria and generate threat intelligence.</li><li>
Compose security alert notifications and other communications.</li><li>
Stay up to date with current vulnerabilities, attacks, and countermeasures.</li><li>
Explain different threats to both technical and non-technical parties who do not necessarily have relevant backgrounds and provide consultancy on how to improve security posture to prevent relative threats.</li><li>
Threat Hunting in Telemetry for hidden, dormant threats, or potentially escalating threats</li><li>
Contribution in Detection Engineering in TM products based on Incident Reports or OSINT</li><li>
Occasional evening and weekend shifts may be required.</li></ul><div></div><div>
REQUIRED EXPERIENCE</div><ul><li>
A degree in a related field such as Digital Forensics, security, computer engineering, computer science, Telecommunication/Electronics engineering, Information Technology or equivalent professional certifications preferably GIAC/SANS (GEIR, GX-FA, and/or GCFA are a clear advantage)</li><li>
Eligible to work in Egypt and is ready to be resident in Cairo (or around it). Role is hybrid; employees may be asked to constantly work from the office a few days per week.</li><li>
3+ year experience in a full-time security position involving threat hunting, detection, Digital Forensic investigation and response.</li><li>
Sufficient knowledge of different security controls</li><li>
Sufficient Knowledge of common enterprise&rsquo;s IT infrastructure (Network and several types of OS)</li><li>
Sufficient knowledge on adversary Tactics, Techniques, and procedures and ability to map them to threat modeling frameworks</li><li>
Experience with log analysis, event correlation and incident management procedures and systems, and knowledge of host and network log sources.</li><li>
Experience with host-based digital forensics and threat hunting.</li><li>
Aptitude for learning, self-directed, and working in critical incidents.</li><li>
Must have a powerful sense of duty, diligent in investigation.</li><li>
Ease of communication to internal and external stakeholders in English and Arabic. Communication may include reports, presentations, verbal instant updates, or other forms of communication</li></ul><div></div><div>
PREFERRED EXPERIENCE</div><ul><li>
Total 5+ years of experience in a Cybersecurity/IT/technology relevant role in a structured environment</li><li>
Experience in a comparable vendor or a security service provider</li><li>
Experience in different types of cybersecurity related assessments</li><li>
Malware analysis and threat detection engineering</li><li>
Scripting capability</li><li>
Demonstrated knowledge of Offensive security</li><li>
Experience of Security architecture/controls</li><li>
Familiarity with Trend Micro products and technology</li><li>
A third language proficiency</li><li>
Customer/Executive interfacing experience</li></ul><div></div><div>
Trend Micro strive to build an environment of equity and inclusion, which reflects diverse points of view. We welcome, value, promote, and celebrate diversity - the very experiences and attributes that make us who we are, including but not limited to race, ethnicity, nationality, gender, gender identification, sexual orientation, level of ability, age, religion, veteran status, socio-economic status, and political philosophy.</div><div></div><div>
#LI-Onsite</div><div>
#LI-NA1</div><div></div><div>
We embrace change, empower people, and encourage innovation. Join Trend Micro and Thrive with us.</div></div>

Incident Response Analyst

<div>
 
 
 Line of Service
 
 
 Advisory
 
 
 
 
 Industry/Sector
 
 
 Technology
 
 
 
 
 Specialism
 
 
 Advisory - Other
 
 
 
 
 Management Level
 
 
 Associate
 
 
 
 
 Job Description &amp; Summary
 
 
 At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
 
 
 In digital forensics at PwC, you will focus on investigating and analysing digital evidence to uncover and prevent cybercrimes. You will use advanced technology and techniques to identify and mitigate digital threats, maintaining the security and integrity of digital systems.
 
 
 
 Driven by curiosity, you are a reliable, contributing member of a team. In our fast-paced environment, you are expected to adapt to working with a variety of clients and team members, each presenting varying challenges and scope. Every experience is an opportunity to learn and grow. You are expected to take ownership and consistently deliver quality work that drives value for our clients and success as a team. As you navigate through the Firm, you build a brand for yourself, opening doors to more opportunities.
 
 
 Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:
 
 
 <ul>
 <li>
 Apply a learning mindset and take ownership for your own development.
 </li>
 <li>
 Appreciate diverse perspectives, needs, and feelings of others.
 </li>
 <li>
 Adopt habits to sustain high performance and develop your potential.
 </li>
 <li>
 Actively listen, ask questions to check understanding, and clearly express ideas.
 </li>
 <li>
 Seek, reflect, act on, and give feedback.
 </li>
 <li>
 Gather information from a range of sources to analyse facts and discern patterns.
 </li>
 <li>
 Commit to understanding how the business works and building commercial awareness.
 </li>
 <li>
 Learn and apply professional and technical standards (e.g. refer to specific PwC tax and audit guidance), uphold the Firm's code of conduct and independence requirements.
 
 
 
 </li>
 </ul>
 
 Minimum years experience required
 
 
 <ul>
 <li>
 
 
 Additional application instructions
 
 
 <ul>
 <li>
 
 
 Required Skills
 
 
 
 
 
 Optional Skills
 
 
 Accepting Feedback, Active Listening, Communication, Computer Forensic Software, Cybersecurity Threat Mitigation, Cyber Threat Intelligence, Digital Forensics, Emotional Regulation, Empathy, EnCase (Investigation Software), Forensic Investigation, Fraud Detection, Fraud Investigation, Incident Investigation, Incident Remediation, Inclusion, Intellectual Curiosity, Intrusion Detection System (IDS), Optimism, Relativity E-Discovery, Teamwork, Vulnerability Assessment, Well Being
 
 
 
 
 
 Desired Languages
 
 
 
 
 (If blank, desired languages not specified)
 
 
 
 
 
 
 Travel Requirements
 
 
 Not Specified
 
 
 
 
 Available for Work Visa Sponsorship?
 
 
 No
 
 
 
 
 Government Clearance Required?
 
 
 No
 
 
 
 
 Job Posting End Date
 
 
 
 
 
 
 
 
 
 
 
 
 </li>
 </ul>
 </li>
 </ul>
 
 
 
 
 
</div>

ETIC, Cybersecurity Threat Detection - Associate

<div>Line of Service
Advisory
Industry/Sector
Technology
Specialism
Advisory - Other
Management Level
Associate
Job Description &amp; Summary
At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
 
 
In digital forensics at PwC, you will focus on investigating and analysing digital evidence to uncover and prevent cybercrimes. You will use advanced technology and techniques to identify and mitigate digital threats, maintaining the security and integrity of digital systems.
Driven by curiosity, you are a reliable, contributing member of a team. In our fast-paced environment, you are expected to adapt to working with a variety of clients and team members, each presenting varying challenges and scope. Every experience is an opportunity to learn and grow. You are expected to take ownership and consistently deliver quality work that drives value for our clients and success as a team. As you navigate through the Firm, you build a brand for yourself, opening doors to more opportunities.
Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:
<ul><li>Apply a learning mindset and take ownership for your own development.
</li><li>Appreciate diverse perspectives, needs, and feelings of others.
</li><li>Adopt habits to sustain high performance and develop your potential.
</li><li>Actively listen, ask questions to check understanding, and clearly express ideas.
</li><li>Seek, reflect, act on, and give feedback.
</li><li>Gather information from a range of sources to analyse facts and discern patterns.
</li><li>Commit to understanding how the business works and building commercial awareness.
</li><li>Learn and apply professional and technical standards (e.g. refer to specific PwC tax and audit guidance), uphold the Firm's code of conduct and independence requirements.
</li></ul>Minimum years experience required
Additional application instructions
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Active Listening, Communication, Computer Forensic Software, Cybersecurity Threat Mitigation, Cyber Threat Intelligence, Digital Forensics, Emotional Regulation, Empathy, EnCase (Investigation Software), Forensic Investigation, Fraud Detection, Fraud Investigation, Incident Investigation, Incident Remediation, Inclusion, Intellectual Curiosity, Intrusion Detection System (IDS), Optimism, Relativity E-Discovery, Teamwork, Vulnerability Assessment, Well Being
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
No
Government Clearance Required?
No
Job Posting End Date</div>

State of Ohio

<div><div>Ohio Department of Public Safety &ndash; Ohio Narcotics Intelligence Center
Report In Location: 1970 W. Broad Street, Columbus, Ohio 43223
Perks of Working for the Ohio Department of Public Safety<ul><li>
Multiple pay increases over your first years of service!</li><li>
Free Parking!</li><li>
Free Onsite Gym and Walking Path!</li><li>
Daycare On-site!</li><li>
Cafeteria On-site!</li></ul>
What You&rsquo;ll Do As A Forensic Computer Specialist 1:
Under supervision of the Ohio Narcotics Intelligence Center (ONIC) Computer Forensic Manager, utilizes specialized tools (i.e., computers, evidence acquisition devices, computer peripherals, software) &amp; procedures (i.e., established, validated forensic principles &amp; highly technical &amp; specialized forensic analysis of seized evidence) to collect, examine, &amp;/or enter evidence for extraction &amp;/or analysis by ONIC labs, law enforcement agencies &amp; other labs in accordance with evidence handling procedures (e.g., packaging, storage, preservation, etc.):<ul><li>
Utilize state vehicle to handle &amp; transport digital evidence related to narcotics cases to law enforcement agencies &amp; forensic labs for analysis;</li><li>
Receive, maintain &amp; release evidence in accordance with evidence handling procedures;</li><li>
Collects information from investigators &amp;/or prosecutors &amp; confers with higher-level forensic computer specialists to determine best forensic analysis strategy;</li><li>
Test computer programs according to procedural specifications, configure &amp; maintain computer hardware for use in case work &amp; program development;</li><li>
Resolve technical issues involving equipment connectivity &amp; communication;</li><li>
Execute verification tests of forensic software &amp; methods to independently validate functionality, &amp; responds to routine inquiries from staff, other agency divisions, sections &amp;/or units regarding pertinent research activities;</li><li>
Prepare reports of findings for presentation in criminal case proceedings &amp; testifies as required (e.g., uses forensic analysis of computers &amp;/or computer related evidence to compose written findings reports in preparation for criminal case proceedings; provide verbal &amp;/or written testimony in court &amp; maintains electronic &amp; hard copies of evidence transfers);</li></ul>
<ul><li>Develop &amp; maintain records or reports documenting actions &amp; observations to ensure proper chain of custody of physical evidence;</li><li>
Assist other forensic computer specialists with dark web &amp; criminal activity research, analysis &amp; investigations (e.g., recover deleted &amp;/or corrupted files, password protected &amp;/or encrypted files, recover hidden data, prepare duplicate images of files as backup copies &amp; implement tracking mechanisms pertaining to Internet &amp; network communications);</li></ul>
<ul><li>Assist intelligence analysts &amp; other ONIC staff in developing intelligence products, trend analysis, presentations &amp; other related materials;</li><li>
Attend seminars &amp; classes for training in specialized forensic software applications, forensic analysis techniques &amp; other specialized areas (e.g., keep abreast of significant changes in forensic technology, relative search &amp; seizure rules, software licensing agreements, criminal &amp;/or administrative law);</li><li>
Participate in federal, state, county &amp; local law enforcement taskforces &amp; partnerships;</li><li>
Perform other duties as assigned.</li></ul>
Helpful Tips for Applying:<ul><li>
Be detailed when describing your current/previous work duties. The more the better!! Don't just write &quot;see attached resume&quot;.</li><li>
Tailor your application for each position you apply for. You should clearly describe how you meet the minimum qualifications outlined in this job posting.</li><li>
Respond to all questions asked. If you do not have the education/training/experience that is being asked, select either &quot;No&quot; or &quot;N/A&quot;.</li></ul>
Why Work for the State of Ohio
At the State of Ohio, we take care of the team that cares for Ohioans. We provide a variety of quality, competitive benefits to eligible full-time and part-time employees*. For a list of all the State of Ohio Benefits, visit our Total Rewards website! Our benefits package includes:
<ul>
<li>Medical Coverage</li>
<li>Free Dental, Vision and Basic Life Insurance premiums after completion of eligibility period</li>
<li>Paid time off, including vacation, personal, sick leave and 11 paid holidays per year</li>
<li>Childbirth, Adoption, and Foster Care leave</li>
<li>Education and Development Opportunities (Employee Development Funds, Public Service Loan Forgiveness, and more)</li>
<li>Public Retirement Systems (such as OPERS, STRS, SERS, and HPRS) &amp; Optional Deferred Compensation (Ohio Deferred Compensation)</li>
</ul>
<ul><li>Benefits eligibility is dependent on a number of factors. The Agency Contact listed above will be able to provide specific benefits information for this position.</li></ul>
Qualifications<div>
24 mos. exp. in computer forensic processing or related specialty area (e.g., systems administration; network security; internet protocol). 
 
<ul><li>Or completion of associate core program in computer forensics (e.g., information technology or related scientific discipline systems administration; network security; internet protocol).</li></ul> 
<ul><li>Or equivalent of Minimum Class Qualifications for Employment noted above.</li></ul></div>
Position Specific Minimum Qualification &ndash; Valid Driver&rsquo;s license required. 
 
Job Skills: Forensics
Supplemental Information
UNUSUAL WORKING CONDITIONS: May require travel. 
<ul><li>
This position will be filled in accordance with the bargaining agreement if applicable.</li><li>
This position may require the ability to obtain and maintain a federal Secret level Security Clearance.</li><li>
This position requires a valid driver&rsquo;s license to operate state-owned vehicle or must be able to provide own transportation.</li></ul> 
<ul><li>A BCI and FBI fingerprint check, a background check, including a polygraph examination, may be required on all selected applicants.</li></ul>
ADA Statement
Ohio is a Disability Inclusion State and strives to be a model employer of individuals with disabilities. The State of Ohio is committed to providing access and inclusion and reasonable accommodation in its services, activities, programs and employment opportunities in accordance with the Americans with Disabilities Act (ADA) and other applicable laws.
Drug-Free Workplace
The State of Ohio is a drug-free workplace which prohibits the use of marijuana (recreational marijuana/non-medical cannabis). Please note, this position may be subject to additional restrictions pursuant to the State of Ohio Drug-Free Workplace Policy (HR-39), and as outlined in the posting.</div></div>

Forensic Computer Specialist 1

Trendyol

<div><div><div>About the Team</div><div>
At Trendyol Tech, our mission is to create a positive impact in our ecosystem by enabling commerce through technology.</div><div>
We solve complex problems with data, creativity, and agility &mdash; always driven by real outcomes. With a culture built on learning, collaboration, and ownership, we grow together while building what&rsquo;s next.</div><div></div><div> 
ABOUT THE ROLE</div><div>
As a Security Professional, you will act as a key defender, bridging the gap between security monitoring and effective response. You'll leverage deep expertise in threat hunting, malware analysis, and digital forensics to proactively uncover sophisticated threats and strengthen our security posture. By automating workflows with scripting languages like Python and optimizing our SIEM and EDR platforms, you will enhance our operational efficiency and add value to every stage of our defense lifecycle, all while ensuring our practices meet critical compliance standards.</div></div>
<div><div><h3 class="jobSectionHeader">Responsibilities</h3><ul><li><ul><li>
Conduct deep-dive analysis of complex security incidents, perform root cause investigations, and coordinate appropriate response actions.</li><li>
Proactively perform threat hunting activities to identify advanced threat actors, leveraging frameworks like MITRE ATT&amp;CK to analyze attacker behaviors.</li><li>
Analyze malware and malicious activity on EDR, SIEM, and network traffic data using both static and dynamic analysis techniques.</li><li>
Apply basic reverse engineering methods when needed to support the analysis of suspicious files and malware samples.</li><li>
Perform forensic investigations by analyzing logs, memory dumps, registries, and event data to uncover indicators of compromise.</li><li>
Automate incident response workflows and develop playbooks using SOAR platforms to improve efficiency and accuracy.</li><li>
Utilize, analyze, and leverage diverse cyber threat intelligence sources&mdash;including open-source feeds, commercial platforms, and internal telemetry&mdash;to proactively monitor emerging threats, assess attacker tactics, techniques, and procedures (TTPs), and continuously update and enhance defensive measures and response strategies.</li><li>
Operate and optimize security tools including SIEM (e.g., Splunk, Azure Sentinel), EDR (e.g., CrowdStrike, Microsoft Defender), IDS/IPS, and integrate new log sources for enhanced visibility.</li><li>
Contribute to incident monitoring and response activities aligned with compliance standards such as KVKK, GDPR, ISO 27001, PCI-DSS, BDDK, and support regulatory audit requirements.</li><li>
Produce comprehensive incident reports and ensure thorough documentation of investigations and remediation steps.</li></ul></li></ul></div></div>
<div><div><h3 class="jobSectionHeader">Expected Qualifications</h3><ul><li><ul><li>
4+ years of experience in security</li><li>
Strong experience in malware analysis, including both static and dynamic techniques.</li><li>
Proficiency in reverse engineering tools and techniques.</li><li>
Hands-on experience with SIEM platforms, EDR solutions, and network security tools.</li><li>
Familiarity with the MITRE ATT&amp;CK framework and threat intelligence services.</li><li>
Experience with scripting languages such as Python or PowerShell for automation tasks.</li><li>
Excellent analytical and problem-solving skills.</li><li>
Strong written and verbal communication skills in English.</li><li>
Certifications such as CISSP, GCIH, GCFA, CEH, or Security+ are preferred.</li></ul></li></ul></div></div>
<div><div>What We Offer</div><ul><li>Hybrid working model with flexibility: a schedule that helps you find the right balance between flexibility and team bonding, including work-from-abroad opportunities and a summer working model.</li><li>Customisable FlexBenefits budget: Adjust your daily meal allowance, choose your health insurance package (and extend it to your spouse or children), and pick from additional benefits like fuel support or Trendyol shopping credits.</li><li>Well-being support: Access to location-based in-house doctors, as well as psychologist and dietitian support, and HPV vaccination provision.</li><li>Personalised training allowance and learning opportunities: Use your annual budget for any training or conference of your choice, explore our Learning Management System (LMS) anytime, and join in-person learning sessions offered throughout the year.</li><li>Responsibility from day one: Take full ownership from the start in a culture where every voice is heard and valued.</li><li>A diverse, international team: Collaborate with global peers across our offices in Berlin, Amsterdam, Dubai, and beyond, in a startup-spirited and collaborative environment.</li><li>Opportunities to grow with the best: Tackle meaningful challenges, develop through hands-on experience, and grow with the support of expert guidance and global mentoring.</li><li>Meaningful connections beyond tasks: Be part of team rituals, events, and social activities that help us stay connected and inspired.</li></ul><div></div><div> 
Take the Next Step</div><div>
If this role excites you, apply today, we look forward to taking the next step with you.</div><div>
Want to get to know the team better first? Explore our Career Website, LinkedIn, or YouTube to learn more about #LifeatTrendyol and how we work.</div></div></div>

Cyber Defence Center Engineer

Search 10000+ Digital forensics analyst jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 digital forensics analyst jobs NEAR_ME

Incident Response and Forensic Investigation Specialist (DFIR)

Incident Response_SOC Specialist

Incident Response Analyst

ETIC, Cybersecurity Threat Detection - Associate

ETIC, Cybersecurity Threat Detection - Associate

Forensic Computer Specialist 1

Cyber Defence Center Engineer