Forensic Consultant

Forensic Focus; Hyderabad; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Forensic Focus in Hyderabad is seeking an experienced digital forensics or incident response professional to lead investigations on compromise and ransomware cases within a fixed-term engagement. You will guide a team of analysts, coordinate timelines, and communicate complex technical findings to clients and counsel.

The role covers examining OS artifacts, memory, and network logs, plus documenting clear narratives and reports.

Qualifications

• Strong knowledge of Windows and Unix/Linux disk and memory forensics.
• Experience with network traffic analysis and log review.
• Familiarity with MITRE ATT&CK frameworks and case reporting.

Responsibilities

• Lead forensic analysis for compromise and ransomware investigations.
• Examine OS artifacts, memory, and network logs to identify indicators of compromise.
• Document findings in clear narratives and client-ready reports.

Skills

Windows forensics

Unix/Linux forensics

Memory forensics

Network analysis

Log review

MITRE ATT&CK

Tools

EnCase

FTK

X-Ways

SIFT

Splunk

Redline

Volatility

Wireshark

TCPDump

Axiom

Job description

The Role

This fixed-term position involves leading forensic analysis for compromise and ransomware investigations within a dedicated response team.

Responsibilities include examining operating system artifacts, memory, and network logs, identifying indicators of compromise, and documenting findings into clear investigative narratives and reports for clients and counsel.

Skills & Experience

Requires strong knowledge of Windows, Unix/Linux disk and memory forensics, network traffic analysis, and log review. Familiarity with tools such as EnCase, Axiom, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, Wireshark, and TCPDump is expected, along with experience using MITRE ATT&CK frameworks.

Who It Suits

Ideal for an experienced digital forensics or incident response professional comfortable leading analysts, managing project timelines, and communicating complex technical findings clearly to both technical and non-technical stakeholders under contract-based engagements.