Global Contract DFIR Investigator – Mexico-based

Lever, Inc.; México; Presencial; MXN 551.000 - 964.000; A tiempo parcial

Ventajas ofrecidas por este puesto de trabajo

Flexible contract-based engagement

Live investigations exposure

Cloud forensics exposure

Experienced IR team

Hands-on exposure to emerging threats

Flexible workload

Descripción de la vacante

Lever, Inc. on behalf of a partner company is seeking an International Contract Bench, Incident Response (DFIR) professional based in Mexico.

You will support high-impact digital investigations across Windows, macOS, Linux, cloud, and SaaS environments, delivering insights for active cases. This flexible contract role lets you stay technically engaged without a traditional full-time on-call schedule, contributing your expertise while balancing other commitments.

Formación

• Professional experience responding to cyber threat activity as an Incident Response consultant, SOC analyst, or in a closely related role.
• Strong understanding of Windows, macOS, and Linux fundamentals and relevant forensic artifacts.
• Experience with digital forensics, business email compromise investigations, and network analysis.
• Knowledge of cloud-native investigations across AWS, GCP, and Azure, or willingness to develop expertise.
• Investigative mindset with focus on accuracy, evidence quality, and thorough analysis.
• Ability to distinguish legitimate user activity from threat actor behavior based on evidence.
• Interest in threat intelligence and evolving cyber threats.
• Ability to work independently while contributing to a team.

Responsabilidades

• Perform incident response and digital forensic investigations involving active threat activity and security breaches.
• Analyze live response data and forensic artifacts to identify malicious activity, determine attack methods, and support investigations.
• Investigate Windows, macOS, and Linux environments using appropriate forensic techniques and tooling.
• Analyze business email compromise (BEC), account takeover, and other identity-related incidents.
• Conduct network analysis to identify suspicious activity, attacker behavior, and relevant indicators of compromise.
• Support investigations across cloud-native environments, including AWS, GCP, Azure, and SaaS applications.
• Apply threat intelligence and current knowledge of adversary techniques to investigative work.
• Contribute high-quality analysis to cases involving ransomware and nation-state activity.
• Share investigative perspectives and feedback to strengthen IR practices.
• Take on assignments for several hours per week according to availability.

Descripción del empleo

Lever, Inc. on behalf of a partner company is seeking an International Contract Bench, Incident Response (DFIR) professional based in Mexico.

You will support high-impact digital investigations across Windows, macOS, Linux, cloud, and SaaS environments, delivering insights for active cases. This flexible contract role lets you stay technically engaged without a traditional full-time on-call schedule, contributing your expertise while balancing other commitments.