Forensics Consultant

PT ITSEC Asia Tbk; Jakarta Selatan; Sur place; IDR 180 000 000 - 300 000 000; Plein temps

Résumé du poste

PT ITSEC Asia Tbk is seeking a senior digital forensics consultant to lead investigations across client environments, analyzing evidence from endpoints, servers, cloud, and network sources. You will reverse engineer malware, profile threat actors, and preserve data with strict chain-of-custody practices.

The role requires 3–5 years in related security fields, a relevant bachelor’s degree, and strong report writing and client communication. Occasional mentoring of junior staff is expected.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, or a related field.
• 3-5 years in digital forensics, incident response, or related security roles.
• Solid understanding of forensic processes, data recovery, and evidence handling.
• Awareness of standards and regulations (NIST, GDPR, local data privacy laws).
• Proficiency with forensic tools (Plaso, Volatility, ELK, EnCase, FTK, X-Ways).
• Ability to translate data into client reports clearly.
• Understanding of chain-of-custody documentation.
• Clear communication with clients; explain findings to non-technical audiences.
• Collaborative and adaptive approach to client delivery.

Responsabilités

• Lead and support digital forensic investigations and compromise assessments across client environments.
• Conduct an in-depth analysis of digital evidence from endpoint, server, cloud, and network sources to uncover signs of unauthorized activity or policy violations.
• Perform malware reverse engineering, evasion technique analysis, and threat actor behavior profiling.
• Execute forensic acquisition and preservation of data using industry-standard tools and maintain chain-of-custody integrity.
• Analyze logs, memory dumps, registry files, file metadata, and other artifacts to identify the scope and impact of an incident.
• Translate technical findings into clear, actionable reports tailored for both technical and executive stakeholders.
• Collaborate directly with client teams to ensure forensic activities align with their business objectives and regulatory frameworks.
• Support the development and refinement of forensic methodologies, tools, templates, and internal playbooks.
• Mentor junior consultants through peer reviews, technical coaching, and project support.

Connaissances

Digital forensics

Incident response

Malware analysis

Evidence handling

Chain of custody

Forensic reporting

Analytical mindset

Client communication

Investigation skills

Collaborative skills

Formation

Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, or related field

Outils

Plaso

Volatility

ELK

EnCase

FTK

X-Ways

Description du poste

Job Responsibilities

• Lead and support digital forensic investigations and compromise assessments across client environments.
• Conduct an in-depth analysis of digital evidence from endpoint, server, cloud, and network sources to uncover signs of unauthorized activity or policy violations.
• Perform malware reverse engineering, evasion technique analysis, and threat actor behavior profiling.
• Execute forensic acquisition and preservation of data using industry-standard tools and maintain chain-of-custody integrity
• Analyze logs, memory dumps, registry files, file metadata, and other artifacts to identify the scope and impact of an incident.
• Translate technical findings into clear, actionable reports tailored for both technical and executive stakeholders.
• Collaborate directly with client teams to ensure forensic activities align with their business objectives and regulatory frameworks.
• Support the development and refinement of forensic methodologies, tools, templates, and internal playbooks.
• Mentor junior consultants through peer reviews, technical coaching, and project support.

Education and Experience

• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, or a related field.
• 3-5 years in digital forensics, incident response, or related security roles.

Requirements

• Solid understanding of forensic processes, data recovery, and evidence handling.
• Awareness of relevant best practice, standards and regulations (NIST, GDPR, local data privacy laws).
• Familiarity with various attack vectors and forensic artifacts (e.g., logs, registry, memory).
• Proficiency with open-source and commercial forensic tools (e.g., Plaso, Volatility, ELK, EnCase, FTK, X-Ways).
• Ability to parse data and create clear, actionable client reports.
• Understanding of chain-of-custody documentation.
• Analytical mindset and investigative skills.
• Clear communication with clients, able to explain technical findings to non-technical audiences.
• Collaborative and adaptive approach to client delivery.

Additional Qualifications

• Having relevant certifications (e.g. GCFA, GCFE, EC-CEH, ECIH, CHFI) is an advantage.