Digital Forensics and Incident Response

CONFIDENCIAL; São Paulo; Vor Ort; BRL 120.000 - 180.000; Vollzeit

Zusammenfassung

CONFIDENCIAL is seeking a talented Digital Forensics and Incident Response (DFIR) specialist to join our team. The candidate will investigate security incidents, analyze digital evidence, and respond to cyber threats across Windows, Linux, Mac, cloud, and enterprise environments.

You will develop DFIR procedures, build reports for technical and non-technical audiences, and collaborate with security operations, threat hunting, and engineering teams.

Qualifikationen

• Bachelor’s degree or equivalent practical experience in cybersecurity or related field.
• 3+ years in Digital Forensics and Incident Response.
• Strong analytical and problem-solving skills; able to validate forensic findings.
• Experience conducting investigations in enterprise environments.
• Excellent written and verbal communication; capable of customer-facing support.
• Willingness for after-hours support during incidents.
• Security certifications in DFIR (GCFE, GCIH, GCFA, SANS, CFCE) are a plus.

Aufgaben

• Conduct digital forensic investigations across Windows, Linux, Mac, cloud, and enterprise environments.
• Collect, preserve, analyze, and document digital evidence with proper chain-of-custody.
• Perform host-based forensic analysis including timeline and malware triage.
• Utilize modular forensic workflows and specialized tooling.
• Provide remote and onsite incident response support for customer engagements.
• Develop and improve DFIR procedures, playbooks, and automation.

Kenntnisse

Digital forensics

Incident response

Security investigations

Communication

Work under pressure

Ausbildung

Bachelor’s degree in Cybersecurity/IT/CS

Tools

Eric Zimmerman Tools

KAPE

FTK

Arsenal Recon / Arsenal Image Mounter

SIEM platforms

EDR platforms

Jobbeschreibung

We are looking for a talented Digital Forensics and Incident Response (DFIR) to join our team!

If you´re a passionate about cybersecurity, skilled in investigating security incidents,analyzing digital evidence, and responding to cyber threats, this is an exciting opportunity to take your expertise to the next level.

Are you ready foryour next challenge??

• Conduct digital forensic investigations and incident response activities across Windows, Linux, Mac, cloud, and enterprise environments.
• Collect, preserve, analyze, and document digital evidence following forensic best practices and chain-of-custody procedures.
• Perform host-based forensic analysis including timeline analysis, persistence mechanisms, user activity reconstruction, and malware triage.
• Utilize modular forensic workflows and specialized tooling rather than relying solely on automated forensic suites.
• Conduct remote and onsite incident response support for customer engagements.
• Assist with containment, eradication, and recovery recommendations during active incidents.
• Produce detailed forensic reports, timelines, and technical findings suitable for technical and non-technical audiences.
• Collaborate with security operations, threat hunting, and engineering teams during investigations.
• Develop and improve DFIR procedures, playbooks, evidence collection standards, automation, and investigation methodologies.
• Stay current on emerging attacker techniques, forensic methodologies, and DFIR tooling.

Preferred Technical Experience:

• Experience with forensic and incident response tools such as:
• Eric Zimmerman Tools, KAPE, FTK, Arsenal Recon / Arsenal Image Mounter
• SIEM and EDR platforms

Strong understanding of:

• Linux and Windows internals and forensic artifacts
• Networking
• NTFS file systems
• Event log analysis
• Memory forensics
• Timeline analysis
• Malware triage
• Enterprise incident response workflows
• Familiarity with scripting or automation using PowerShell or Python is a plus.
• Understanding of cloud (AWS, GCP, Azure) and M365 forensic investigations is preferred.

Minimum Requirements: Education and Skills:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience.
• 3+ years of experience in Digital Forensics and Incident Response.
• Strong analytical and problem-solving skills with the ability to independently validate forensic findings.
• Experience conducting investigations in enterprise environments.
• Ability to work independently and collaboratively during high-pressure incidents.
• Excellent written and verbal communication skills.
• Willingness to participate in customer-facing incident response activities, including after-hours support when required.
• Ability to work under pressure and meet deadlines.
• Security certifications related to forensics such as:
• GIAC Certified Forensic Examiner (GCFE)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• SANS certifications or equivalent DFIR-focused training
• CFCE or other recognized forensic certifications