DFIR Lead

UST; Thiruvananthapuram; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

CyberProof is seeking a DFIR Expert (Lead) to head high-impact forensic investigations and incident response. You will mentor the team, act as the top escalation point, and work hands-on to contain threats and protect client environments.

You will guide incident containment, develop automation, deliver root cause analyses, and collaborate with cross-functional teams to scale the DFIR service and drive growth.

Qualifications

• 3+ years of hands-on DFIR/Threat Hunting/InfoSec experience.
• Deep understanding of Windows and Linux, networks, and compromise footprints.
• Experience performing dynamic and static malware analysis for IOCs.
• Strong knowledge of digital forensics methodologies and security architectures.
• Willingness for 24/7 escalation during critical incidents.

Responsibilities

• Investigate and respond to high-impact incidents across systems and networks.
• Lead forensic investigations and coordinate containment, eradication, and recovery.
• Serve as highest escalation point and manage client communications.
• Develop and maintain custom tools to automate triage and investigations.
• Deliver detailed incident reports and root cause analyses.

Skills

Digital Forensics

Incident Response

Issue Analysis

Malware Analysis

Job description

Role Description

DFIR Expert (Lead)

We are looking for a DFIR Expert to join our team at CyberProof. In this role, you will lead high-impact forensic investigations, drive incident response efforts, and shape the future of our DFIR service. You will serve as the highest escalation point, working hands-on to contain threats and protect our clients' environments.

What You ll Do

• Investigate & Respond: Conduct deep-dive digital forensics investigations across file systems, memory, and networks. Leverage EDR, SIEM, firewalls, and diverse datasets to handle containment, eradication, and recovery.
• Lead the Effort: Act as the technical and management lead during incidents, managing communication both internally and externally with clients.
• Innovate & Automate: Develop custom tools to automate triage and accelerate the investigation process. Introduce and maintain systems to keep the team mission-ready.
• Own the Service: Collaborate with pre-sales, account managers, and subcontractors to scale the DFIR service, expand customer reach, and drive business growth.
• Deliver Clarity: Provide in-depth incident reports and comprehensive Root Cause Analysis.

What We re Looking For

• Experience: 3+ years of hands-on experience in DFIR, Threat Hunting, SOC, or InfoSec.
• OS & Network Internal Expertise: Deep understanding of Windows and Linux operating system essentials, network communications, and compromise footprints.
• Malware Analysis: Proven ability to perform dynamic and static malware analysis to extract actionable indicators of compromise (IOCs).
• Technical Breadth: Strong grasp of digital forensics methodologies, computer intrusion tactics, security architecture, and system administration.
• Mindset: A critical thinker with a proactive, action-oriented approach to problem-solving and excellent attention to detail.
• Availability: Ready to tackle confirmed breaches as part of our highest escalation tier, which includes 24/7 availability when critical incidents strike.

Advantages (Nice to Have)

• Experience with macOS Forensics or Cloud Incident Response.
• Strong time management and communication skills.
• Industry-standard certifications such as GCFE, GCFA, GNFA, GCTI, GCIH, or GCIA.

Skills

• Digital Forensics
• Incident Response
• Issue Analysis
• Malware Analysis