DFIR Analyst

Forensic Focus Limited; Delhi; On-site; INR 240,000 - 2,000,000; Full time

Job summary

Innefu Labs in Delhi is seeking a DFIR Analyst to investigate cybersecurity incidents across Windows, Linux and macOS endpoints, analyze forensic artifacts, perform memory forensics and support threat hunting and remediation with SOC and IR teams.

Candidates should have 2–3 years in DFIR or SOC, know NTFS, ext4 and APFS, and hands-on experience with Magnet AXIOM, KAPE, Velociraptor, EnCase or FTK, plus scripting in Python/PowerShell/Bash and familiarity with MITRE ATT&CK TTPs.

Qualifications

• 2–3 years DFIR or SOC experience.
• Familiarity with NTFS, ext4, APFS.
• Hands-on use of Magnet AXIOM, KAPE, Velociraptor, EnCase or FTK.
• Scripting in Python, PowerShell or Bash.
• Knowledge of MITRE ATT&CK TTPs.
• Certifications such as GCFE, GCFA or GCIH are advantageous.

Responsibilities

• Investigate cybersecurity incidents across Windows, Linux, and macOS endpoints.
• Analyze platform-specific forensic artifacts and perform memory forensics.
• Extract and correlate IOCs, build attack timelines, support threat hunting and remediation with SOC/IR teams.

Skills

DFIR

SOC

Filesystems

Forensic tools

Scripting

MITRE ATT&CK

Certifications

Tools

Magnet AXIOM

KAPE

Velociraptor

EnCase

FTK

Job description

# DFIR Analyst*Innefu Labs***Delhi**Mid · Full-time### The RoleThe analyst investigates cybersecurity incidents across Windows, Linux, and macOS endpoints, analysing platform-specific forensic artifacts, performing memory forensics using tools such as Volatility, extracting and correlating IOCs, building attack timelines, and supporting threat hunting and remediation activities in collaboration with SOC and IR teams.### Skills & ExperienceCandidates need 2–3 years of DFIR or SOC experience, familiarity with file systems including NTFS, ext4, and APFS, and hands-on use of tools such as Magnet AXIOM, KAPE, Velociraptor, EnCase, or FTK. Scripting in Python, PowerShell, or Bash and knowledge of MITRE ATT&CK TTPs are expected. Certifications such as GCFE, GCFA, or GCIH are advantageous.### Who It SuitsThis role suits a mid-level cybersecurity professional with practical forensic investigation experience who is comfortable working across multiple operating systems, communicating findings to both technical and non-technical stakeholders, and contributing to playbook development and detection engineering improvements.Typical advertised salary forDigital Forensics roles in India:**₹240,000–₹2,000,000**(median ₹550,000 — from11 recent listings analysed by Forensic Focus).Compare Digital Forensics salaries in India →Certifications mentioned:GCFA · GCFE · GCIH — find training for these on theDFIR Training Finder.Learn More/Apply