Digital Forensics and Incident Response (DFIR) Analyst

Mizuho; Chennai District; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

Mizuho Global Services Pvt Ltd (MGS) in Chennai invites applications for a Digital Forensics and Incident Response (DFIR) Analyst. Lead cyber investigations, perform advanced forensic analysis across endpoints, memory, network, and cloud, and drive DFR readiness with playbooks and detections.

The role requires 5-15 years in cybersecurity with deep DFIR expertise, strong leadership, and experience coordinating regulatory and audit requirements.

Qualifications

• 5-15 years of cybersecurity experience, with hands-on DFIR expertise.
• Proven experience leading enterprise-scale cyber investigations including ransomware, malware, insider threats and data exfiltration.
• Deep forensics and incident response capabilities across endpoint, memory, disk, network, identity, email and cloud environments.
• Experience supporting legal, regulatory, audit, and evidentiary requirements including chain-of-custody.

Responsibilities

• Lead investigations and response activities for cybersecurity incidents.
• Direct digital forensic investigations across endpoint, memory, network, identity, email, and cloud environments.
• Coordinate cross-functional response efforts for containment, eradication, recovery, regulatory reporting, and remediation.
• Perform advanced forensic analysis, attack-path reconstruction and evidence correlation to support decision making.
• Translate findings into detections, threat hunting use cases and incident response playbooks.
• Mature DFIR readiness through standards, tabletop exercises and preparedness programs.
• Provide technical leadership, mentorship, and executive reporting support for audit and compliance.

Skills

DFIR

Cybersecurity leadership

Analytical thinking

Executive reporting

Education

Bachelor's degree in Cybersecurity

Tools

Splunk ES

Microsoft Sentinel

Microsoft Defender XDR

CrowdStrike Falcon

Palo Alto Cortex XDR

Cortex XSOAR

Volatility

KAPE

Magnet AXIOM

EnCase

FTK

Wireshark

YARA

Sysinternals

Azure

Microsoft 365

AWS

Active Directory

Windows

Linux

SIEM

SOAR

EDR/XDR

Job description

Mizuho Global Services Pvt Ltd (MGS) is a subsidiary company of Mizuho Bank, Ltd, which is one of the largest banks, also called a Mega Bank of Japan. MGS was established in the year 2020 as part of Mizuho long-term strategy of creating a captive global processing center for remotely handling banking and IT-related operations of Mizuho Bank’s domestic and overseas offices and Mizuho’s group companies across the globe.

At Mizuho, we are committed to a culture driven by ethical values and supporting diversity in all its forms for our talent pool. The direction of MGS’s development is paved by its three key pillars: Mutual Respect, Discipline, and Transparency, which serve as the baseline of every process and operation carried out at MGS.

What’s in it for you?

• Immense exposure and learning
• Company of highly passionate leaders and mentors
• Ability to build things from scratch

Job title: Digital Forensics and Incident Response (DFIR) Analyst

Key Responsibilities:

• Lead investigations and response activities for cybersecurity incidents, including ransomware, malware, insider threats, credential compromise, and data breaches.
• Direct digital forensic investigations across endpoint, memory, network, identity, email, and cloud environments to determine attack scope, root cause, business impact, and remediation requirements.
• Coordinate cross-functional response efforts supporting containment, eradication, recovery, regulatory reporting, and post-incident remediation activities.
• Perform advanced forensic analysis, attack-path reconstruction, malware investigations, evidence correlation, and incident scoping to support accurate and timely decision‑making.
• Improve cyber defense capabilities by translating investigation findings into detections, threat hunting use cases, incident response playbooks, automation opportunities, and security control improvements.
• Mature DFIR readiness through improved incident response standards, forensic procedures, tabletop exercises, simulations, and response preparedness programs.
• Provide technical leadership, mentorship, executive reporting, and support for audit, legal, compliance, and evidentiary requirements.

Required Qualifications:

• 5 - 15 years of cybersecurity experience, including significant hands‑on expertise in Digital Forensics & Incident Response (DFIR).
• Proven experience leading enterprise‑scale cyber investigations involving ransomware, malware, insider threats, cloud incidents, credential compromise, advanced threats, and data exfiltration.
• Deep expertise in endpoint, memory, disk, network, identity, email, and cloud forensics, along with incident response, threat hunting, attack‑path analysis, and detection engineering principles.
• Experience supporting legal, regulatory, compliance, audit, and evidentiary requirements, including chain‑of‑custody and forensic evidence preservation.
• Strong leadership, communication, stakeholder management, investigative, analytical, and executive reporting skills.
• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or equivalent experience.
• Security Technologies: Splunk Enterprise Security, Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike Falcon, Palo Alto Cortex XDR, Palo Alto Cortex XSOAR, Velociraptor, Volatility, KAPE, Magnet AXIOM, EnCase, FTK, Wireshark, YARA, Sysinternals, Microsoft Azure, Microsoft 365, AWS, Active Directory, Microsoft Entra ID, Windows, Linux, SIEM, SOAR, EDR/XDR, cloud security, threat intelligence, forensic analysis, and security automation platforms.