DFIR Specialist – Incident Responder

About the role

Join a dynamic cybersecurity team in the GO division, protecting a leading defense organization. As an Incident Responder – DFIR Specialist, you will investigate security incidents, conduct deep‑dive forensic analysis, and develop actionable response and remediation plans.

Key responsibilities

• Investigate and analyze security incidents to determine scope, impact, and root cause.
• Perform threat hunting across internal and external data sources.
• Conduct digital forensics on systems, including memory and host‑based analysis.
• Develop and implement incident response playbooks and remediation strategies.
• Collaborate with cross‑functional teams to contain and remediate threats.
• Design and recommend defensive measures to prevent future attacks.
• Stay current with evolving attacker TTPs.
• Participate in an on‑call rotation approximately once every four weeks.

Required profile

• Minimum 4 years of hands‑on experience in incident response, threat hunting, digital forensics, and security monitoring.
• Strong understanding of networking concepts and advanced network traffic analysis.
• Proven ability to lead and coordinate incident response efforts across teams.
• Experience in large‑scale enterprise environments with complex security challenges.

Required skills

• Incident response
• Threat hunting
• Digital forensics (memory and host‑based analysis)
• Network traffic analysis
• Cloud security (AWS, Azure)
• Python scripting
• Bash scripting
• PowerShell scripting