Global Incident Response & Digital Forensics Lead

Check Point Software Technologies; England; Vor Ort; GBP 70.000 - 110.000; Vollzeit

Zusammenfassung

Check Point Software Technologies in the United Kingdom is seeking an experienced security professional to lead end-to-end DFIR and incident response engagements. The role requires deep forensic capabilities, strong communication with customer teams, and the ability to drive containment, remediation, and reporting across global incidents.

You will analyze Windows and other enterprise systems, develop playbooks, facilitate tabletop exercises, and collaborate with cross-geography teams to minimize

Qualifikationen

• 5+ years of cybersecurity experience.
• Minimum 2 years of hands-on DFIR/Incident Response on confirmed compromises.
• Proven forensic investigations to determine initial access, root cause, persistence, and attacker activity.
• Experience analyzing Windows artifacts, endpoint telemetry, logs, authentication activity, and network evidence.
• Experience leading incident response for complex, large-scale or global security incidents.

Aufgaben

• Lead and perform end-to-end Incident Response and Digital Forensics investigations from scoping to reporting.
• Analyze compromised systems to determine attacker activity and scope.
• Reconstruct attacker activity using telemetry to identify indicators of compromise.
• Develop containment, eradication, and remediation recommendations.
• Produce detailed incident reports outlining attack vectors, findings, and actions.
• Communicate findings to customer technical teams and senior stakeholders.
• Develop incident response plans, playbooks, and tabletop exercise scenarios.
• Collaborate with global incident responders, forensic investigators, and customer teams.

Kenntnisse

DFIR/IR experience

Windows forensics

Incident response leadership

Tabletop exercises

Strong communication

Jobbeschreibung

Check Point Software Technologies in the United Kingdom is seeking an experienced security professional to lead end-to-end DFIR and incident response engagements. The role requires deep forensic capabilities, strong communication with customer teams, and the ability to drive containment, remediation, and reporting across global incidents.

You will analyze Windows and other enterprise systems, develop playbooks, facilitate tabletop exercises, and collaborate with cross-geography teams to minimize