Digital Forensics and Incident Response (DFIR) Specialist

Forensic Focus Limited; Jaipur; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Forensic Focus Limited in Jaipur seeks a senior DFIR professional to lead end-to-end investigations across endpoints, networks, cloud, and mobile. You will acquire evidence, perform malware analysis, threat hunting, containment, and deliver technical and executive reports.

The role requires independence and strong communication with leadership. Ideal candidates bring 5–8 years of hands-on DFIR experience, familiarity with cloud/hybrid environments, and robust playbook/SOP development skills.

Qualifications

• Hands-on DFIR experience in investigations and incident response.
• Proficient in disk and memory forensics, log analysis and IOC extraction.
• Familiarity with cloud/hybrid environments and strong chain-of-custody practices.

Responsibilities

• Lead end-to-end forensic investigations and incident response across endpoints, networks, cloud and mobile.
• Perform evidence acquisition, malware analysis, threat hunting, and containment support.
• Develop playbooks and SOPs and produce clear technical and executive-level reports.

Skills

Disk forensics

Memory forensics

Log analysis

Malware analysis (static)

Malware analysis (dynamic)

IOC extraction

Cloud experience

Hybrid environments

Chain of custody

Playbooks & SOPs

Job description

The Role

This senior position involves leading end-to-end forensic investigations and incident response engagements across endpoints, networks, cloud, and mobile environments. Day-to-day work includes evidence acquisition, malware analysis, threat hunting, containment support, and producing clear technical and executive-level reports for stakeholders.

Skills & Experience

Candidates should bring five to eight years of hands-on DFIR experience, including disk and memory forensics, log analysis, static and dynamic malware analysis, and IOC extraction. Familiarity with cloud and hybrid environments is expected, along with strong chain-of-custody practices and the ability to develop playbooks and SOPs.

Who It Suits

This role suits an experienced forensic practitioner who is comfortable operating independently in senior technical capacity, thrives during active incidents such as ransomware or APT intrusions, and can communicate complex findings clearly to both technical teams and non-technical leadership.