CyberSOC Digital Forensics Specialist

Nestlé SA; Kuala Lumpur; Hybrid; MYR 80,000 - 100,000; Full time

Job summary

A leading global food and beverage company is seeking a Digital Forensics Specialist in Kuala Lumpur. The role involves leading forensic investigations into cybersecurity incidents while working closely with various departments. Candidates should hold a Bachelor's or Master's degree in Computer Science or Information Security, combined with 3+ years of related experience. This position offers a flexible working environment, contributing to safeguarding data and trust across the organization.

Benefits

Flexible working environment

Opportunity to impact global digital security

Qualifications

• 3+ years of experience in digital forensics, incident response, or related fields.
• Strong understanding of evidence handling and threat detection methodologies.
• Relevant certifications like CHFI or GIAC advantageous.

Responsibilities

• Lead forensic investigations into cybersecurity incidents and compromised systems.
• Deliver forensic analysis aligned with guidance from Legal and HR.
• Design and automate workflows for data acquisition.

Skills

Digital forensics

Incident response

Security investigations

Forensic tools proficiency

Scripting in Python or PowerShell

Education

Bachelor’s or Master’s in Computer Science or Information Security

Tools

EnCase

Magnet AXIOM

Volatility

Microsoft eDiscovery

Job description

Location: Kuala Lumpur, MY
Company: Nestle Regional Service Centre Malaysia Full-time
Bachelor’s Degree or Masters in Computer Science, Information Security or similar fields
3+ years of experience

Position Summary

Joining Nestlé means becoming part of the world’s largest Food and Beverage Company. Where protecting people, products, and data is essential to our purpose. We operate in a complex digital landscape, and our cybersecurity capabilities play a critical role in safeguarding trust.

As a Digital Forensics Specialist, you will lead forensic investigations into cybersecurity incidents, compromised systems, insider threats, and misconduct cases. You will work closely with Legal, Compliance, HR, and Audit teams to provide expert analysis that supports sensitive internal investigations including malware cases, data loss events, and internal fraud.

You will play a key role in strengthening remote digital forensics capabilities by designing automation workflows, improving forensic tooling, and contributing to global standards and methodologies.

We believe the strongest cybersecurity teams reflect a wide range of backgrounds and perspectives.

We provide a flexible working environment built to support high performance and personal wellbeing including hybrid and remote collaboration across our global cybersecurity community.

A day in the life of…

• Perform advanced digital forensics across computers, mobile devices, networks, and cloud environments for malware, intrusion, data theft, and other security incidents.
• Deliver forensic analysis and reporting aligned with guidance from Legal, HR, Compliance, and when appropriate law enforcement.
• Design and automate workflows to enhance remote data acquisition and forensic repeatability.
• Collaborate with Global CSIRT leadership and digital forensics experts to align on best practices and strengthen standards, playbooks, and processes.
• Handle highly confidential data responsibly in a corporate environment.
• Communicate technical findings clearly to regional stakeholders to support timely and effective incident resolution.
• Work seamlessly with global and virtual teams.
• Lead and support investigations that involve HR and Legal functions with integrity and professionalism.

What will make you successful

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a closely related field.
• 3+ years of experience in digital forensics, incident response, or security investigations.
• Strong understanding of forensic processes, evidence handling, and threat detection methodologies.
• Hands-on experience with forensic tools such as EnCase, Magnet AXIOM, Volatility, and/or digital eDiscovery solutions (Relativity, Microsoft eDiscovery).
• Experience with Microsoft Purview (Insider Risk Management, Data Loss Prevention).
• Ability to investigate and assess data leakage alerts and insider risk signals.
• Scripting capability in Python, PowerShell, or similar languages.
• Familiarity with Microsoft cloud investigation tools (Graph Explorer, M365 eDiscovery, Flow) is a plus.
• Relevant certifications such as CHFI, GIAC (GCFA, GCFE), or similar are an advantage.
• Flexible and hybrid working environment.
• Part of a truly global cybersecurity response team.
• Exposure to advanced digital forensic technology and large-scale investigations.
• A collaborative culture grounded in ethics, trust, and continuous improvement.
• Opportunity to directly impact and enhance digital security at global scale.