Remote Incident Responder - DFIR & Forensics

DataAnnotation; Ireland; Remote; EUR 92,000 - 154,000; Full time

Benefits offered by this job

Flexible remote work

Project-based availability

Job summary

DataAnnotation is seeking an Incident Responder to evaluate how models perform during detection, triage, forensics, and containment. The role involves stress-testing the reasoning against logs and incident timelines to identify where models jump to conclusions.

You will document findings, craft corrective playbooks, and contribute to robust incident analyses. This remote-friendly opening emphasizes hands-on DFIR skills and clear written communication, with no degree required and flexible project

Qualifications

• Hands-on incident response, DFIR, or SOC experience.
• Comfort with logs and forensic artifacts and the timeline of a real intrusion.
• Clear written English; explanations are the training signal.
• No degree required; practical ability matters more.

Responsibilities

• Pressure-test the response reasoning across detection, triage, forensics, and containment, and see where the model jumps to conclusions.
• Catch the costly mistakes: misread logs, missed persistence, broken chain of custody, and containment that tips off the attacker.
• Write the correct playbook when the model falls short, grounded in how real incidents actually unfold.

Skills

Incident response

DFIR expertise

SOC operations

Log analysis

Job description

DataAnnotation is seeking an Incident Responder to evaluate how models perform during detection, triage, forensics, and containment. The role involves stress-testing the reasoning against logs and incident timelines to identify where models jump to conclusions.

You will document findings, craft corrective playbooks, and contribute to robust incident analyses. This remote-friendly opening emphasizes hands-on DFIR skills and clear written communication, with no degree required and flexible project