Job Detail

Job Description

Digital Forensic and Incident Response Consultant Manage and direct complex digital forensic and incident response Providing technical support to law enforcement authorities for cybercrime investigations and prosecution by means of digital forensic investigation and testimony Document findings meticulously, ensuring comprehensive reports and further analysis. Amending existing processes and procedures as necessary, and documenting those changes Educate and guide team members on handling incident and investigation Being a Subject Matter Expert in one or more specific areas of expertise.

Bachelor's degree in cybersecurity, information technology, computer science, or related field (Master's degree preferred).Minimum of 15+ years of experience in cybersecurity incident response and digital forensic.
Experience in handling complex incidents. Strong analytical, problem-solving, and decision-making skills.
Excellent communication and collaboration abilities. Proven leadership and mentoring skill to guide the DFIR team.
Experience in leading and coordinating incident response teams.
Experience working field in CSIRT or CERT or any relevant.
Experience in various forensic domains conduct in depth analysis of critical and complex incident to identify attack vector, root causes and vulnerabilities.
Conduct reverse engineering and analysis of malware to determine functionality and impact.
Allocate tasks based on the team expertise to efficiently handle complex incidents.
Oversees the collection, preservation, and analysis of evidence during investigation.
Review incident reports for accuracy, clarity and completeness.
Mentoring team members to raise their capabilities in digital forensic and response. Identify area of improvement in the analysis and response process to implement enhancements.And, to ensure that CIRR Department members bring complementary skills and knowledge to the team, they will have taken at least three of the following additional courses: And has taken at least three of the following courses:
(ISC}2 Certified Information Systems Security Professional (CISSP)
GIAC Advanced Smartphone Forensics Certification (GASF)
GIAC Certified Forensic Analyst (GCFA)
GIAC Certified Forensic Examiner (GCFE)
GIAC Cloud Forensics Responder (GCFR)
GIAC Defending Advanced Threats (GDAT)
GIAC Experienced Forensic Analyst (GX-FA)
GIAC Information Security Professional Certification (GISP)
GIAC iOS and macOS Examiner (GIME)
GIAC Network Forensic Analyst (GNFA) ISO/IEC 27035 Lead Incident Manager
GIAC Critical Infrastructure Protection Certification (GCIP)
GIAC Global Industrial Cyber Security Professional Certification (GICSP)
GIAC Response and Industrial Defense (GRID) the lnfosec Institute Certified SCADA Security Architect (CSSA) ISA/IEC 62443 QA ICS203 - ICS Practitioners Security (Course) (ISC}2 Malware Analysis Certificate
GIAC Reverse Engineering Malware Certification (GREM) SANS FOR710: Reverse-Engineering Malware: Advanced Code Analysis Encase Certified Examiner (EnCE) Certified Forensic Security Responder (CFSR) Encase Certified eDiscovery Practitioner (ENCEP) Or any other certification that proven expertise in the field of digital forensic and incident response

Skills Required

• Digital & Cyber Security
• ICS Cyber Security Risk