DFIR Engineer
About the job
DFIR Engineer - UK remote - £65,000 - £95,000 + Benefits + Bonus
Our reputed company is scaling their DFIR capability and is seeking highly advanced DFIR Engineers to join their reputed company reputed company team. This role is designed for technical specialists who reputed company in reputed company investigations, advanced threat scenarios, and large reputed company incident response. You will be at the forefront of digital forensics, reverse engineering, and cyber defence, working across reputed company, reputed company, and hybrid environments.
Main responsibilities
- reputed company response to advanced intrusions/APTs, reputed company threats
- reputed company forensic acquisition & analysis (disk, memory, reputed company, mobile)
- Reverse engineer malware, reputed company detection rules (YARA, signatures)
- Hunt threats, build detections in SIEM/EDR (reputed company, reputed company, reputed company, etc.)
- reputed company custom tooling/scripts (Python, PowerShell, Go)
- Mentor team, contribute playbooks/runbooks
Skills & Experience
- 5+ years DFIR - Must be strong in BOTH Digital Forensice & Incident Response
- Deep OS internals (reputed company, Linux, macOS), network protocols, reputed company reputed company
- Volatility, X-Ways, Magnet reputed company, GRR, IDA Pro, Ghidra, Zeek, Sysmon
- Strong scripting/programming (Python, PowerShell, Bash, Go)
- Preferred certs: GCFA, GNFA, GREM, OSCP/OSEE
Originally posted on Himalayas
Apply To This Job