Senior DFIR

Tata Communications Limited; Pune District; Presencial; INR 1.500.000 - 2.500.000; Jornada completa

Descripción de la vacante

Tata Communications Limited is seeking a Senior DFIR Consultant to lead digital forensics, incident response, and malware investigations. The role involves hands-on investigations, customer engagements, and establishing DFIR processes and capabilities.

You will conduct Windows and Linux forensics, analyze memory and disks, perform timeline analysis, and develop playbooks. You will mentor junior staff and help shape IR methodologies.

Formación

• Hands-on DFIR experience with disk and memory forensics.
• Strong knowledge of Windows and Linux forensics and memory analysis.
• Experience in incident response, malware analysis, and log analysis.
• Familiar with MITRE ATT&CK and IR methodologies.
• Certifications in DFIR are a plus (GCFA, CHFI, GCIH).

Responsabilidades

• Lead Windows and Linux forensic investigations, including disk and memory forensics.
• Investigate ransomware, malware infections, data breaches, and security incidents.
• Perform evidence acquisition, preservation, timeline analysis, and root-cause analysis.
• Conduct malware analysis and threat hunting.
• Prepare detailed investigation reports and maintain chain-of-custody documentation.
• Develop DFIR SOPs, playbooks, and investigation procedures.
• Support customer engagements and mentor junior team members.

Conocimientos

DFIR experience

Windows forensics

Linux forensics

Memory analysis

Incident response

Malware analysis

Log analysis

Volatility

KAPE

FTK Imager

Autopsy

Binalyze AIR

MITRE ATT&CK

IR methodologies

Herramientas

Volatility

KAPE

FTK Imager

Autopsy

Binalyze AIR

Descripción del empleo

Role: Senior DFIR Consultant

Job Summary

We are looking for an experienced DFIR professional with strong hands-on expertise in digital forensics, incident response, and malware investigation. The candidate will lead forensic investigations, support customer engagements, and help establish DFIR processes and capabilities.

Key Responsibilities

• Conduct Windows and Linux forensic investigations, including disk and memory forensics.
• Investigate ransomware, malware infections, data breaches, and security incidents.
• Perform evidence acquisition, preservation, timeline analysis, and root cause analysis.
• Conduct malware analysis and threat hunting.
• Prepare detailed investigation reports and maintain chain-of-custody documentation.
• Develop DFIR SOPs, playbooks, and investigation procedures.
• Support customer engagements and mentor junior team members.

Required Skills

• Good hands-on DFIR experience.
• Strong knowledge of Windows/Linux forensics and memory analysis.
• Experience with incident response, malware analysis, and log analysis.
• Hands-on experience with tools such as Volatility, KAPE, FTK Imager, Autopsy, and Binalyze AIR.
• Knowledge of MITRE ATT&CK and incident response methodologies.

Preferred Certifications

• GIAC Certified Forensic Analyst (GCFA)
• EC-Council Certified Hacking Forensic Investigator (CHFI)
• GIAC Certified Incident Handler (GCIH)