France-Based Contract DFIR Incident Responder

Lever, Inc.; France; Sur place; EUR 60 000 - 100 000; Temps partiel

Avantages offerts par ce poste

Flexible contract-based engagement

Live IR investigations

Exposure to cloud and ransomware cases

Résumé du poste

Lever, Inc. is seeking an International Contract Bench, Incident Response (DFIR) professional based in France. You will support high-impact digital investigations across Windows, macOS, Linux, and cloud environments, handling cases from ransomware to nation-state threats.

This flexible contract role is designed for experts who stay technically engaged without a traditional on-call schedule. You’ll join an experienced team of forensic and incident response specialists, contributing to

Qualifications

• Professional experience responding to cyber threat activity as an Incident Response consultant, SOC analyst, or in a closely related role.
• Strong understanding of Windows, macOS, and Linux fundamentals and their relevant forensic artifacts.
• Experience with digital forensics, business email compromise investigations, and network analysis.
• Existing knowledge of cloud-native investigations across AWS, GCP, and Azure, or a strong willingness and ability to develop expertise in these areas.
• Strong investigative mindset with a consistent focus on accuracy, evidence quality, and thorough analysis.
• Ability to distinguish legitimate user activity from threat actor behavior based on technical evidence and investigative context.
• Willingness to balance contract incident response work with existing commitments.

Responsabilités

• Perform incident response and digital forensic investigations involving active threat activity and security breaches.
• Analyze live response data and forensic artifacts to identify malicious activity, determine attack methods, and support investigations.
• Investigate Windows, macOS, and Linux environments using appropriate forensic techniques and tooling.
• Analyze business email compromise (BEC), account takeover, and other identity-related incidents.
• Conduct network analysis to identify suspicious activity, attacker behavior, and relevant indicators of compromise.
• Support investigations across cloud-native environments, including AWS, GCP, Azure, and SaaS applications.
• Apply threat intelligence and current knowledge of adversary techniques to investigative work.
• Contribute high-quality analysis to cases involving threats such as ransomware and sophisticated or nation-state activity.
• Share investigative perspectives, technical expertise, and feedback that help strengthen and evolve the incident response practice.
• Take on incident response assignments for a minimum of several hours per week, according to your availability and the needs of active investigations.

Connaissances

Incident response

SOC analysis

Windows

macOS

Linux

Digital forensics

Network analysis

Cloud investigations

Threat intelligence

Investigative mindset

Independent work

Description du poste

Lever, Inc. is seeking an International Contract Bench, Incident Response (DFIR) professional based in France. You will support high-impact digital investigations across Windows, macOS, Linux, and cloud environments, handling cases from ransomware to nation-state threats.

This flexible contract role is designed for experts who stay technically engaged without a traditional on-call schedule. You’ll join an experienced team of forensic and incident response specialists, contributing to