DFIR Analyst: Digital Forensics & Incident Response

Arbeit Infotech; Quezon City; On-site; PHP 520,000 - 760,000; Full time

Job summary

Arbeit Consulting in the Philippines seeks a DFIR Analyst to triage, investigate security events, and support cybersecurity operations. You will perform incident analysis, containment, eradication, and recovery activities, and conduct digital forensics on disk, memory, network, and endpoint artifacts.

The role requires hands-on experience in incident investigation, malware analysis, log analysis, evidence handling, and threat detection & response, with familiarity in SIEM/EDR and MITRE ATT&CK.

Qualifications

• Minimum 3 years of experience in Digital Forensics, Incident Response, SOC, Cybersecurity Operations, or related roles.
• Hands-on experience in Incident Investigation.
• Hands-on experience in Malware Analysis.
• Hands-on experience in Log Analysis.
• Hands-on experience in Evidence Handling.
• Hands-on experience in Threat Detection & Response.
• Familiarity with SIEM, EDR, forensic imaging, and investigation tools.
• Strong understanding of NIST Incident Response Lifecycle.
• Strong understanding of MITRE ATT&CK.
• Strong understanding of Network Security.
• Strong understanding of Operating Systems & Endpoint Security.
• Strong technical writing and incident documentation skills.
• Possess at least two (2) of the following certifications (or equivalent): CCDL1, CCDL2, Security+, CySA+, eCIH.

Responsibilities

• Triage and investigate security events and alerts.
• Perform incident analysis, containment, eradication, and recovery activities.
• Conduct digital forensic investigations on disk, memory, network, and endpoint artifacts.
• Analyze logs, threats, malware behavior, and attacker activities.
• Correlate findings across SIEM, EDR, cloud, and threat intelligence platforms.
• Identify Indicators of Compromise (IOCs) and attacker TTPs.
• Create incident reports, technical findings, and recommendations.
• Participate in cybersecurity exercises, incident simulations, and knowledge-sharing activities.
• Contribute to operational reporting and incident metrics.

Skills

Incident Investigation

Malware Analysis

Log Analysis

Evidence Handling

Threat Detection & Response

Technical Writing

Tools

SIEM

EDR

Forensic Imaging

Job description

Arbeit Consulting in the Philippines seeks a DFIR Analyst to triage, investigate security events, and support cybersecurity operations. You will perform incident analysis, containment, eradication, and recovery activities, and conduct digital forensics on disk, memory, network, and endpoint artifacts.

The role requires hands-on experience in incident investigation, malware analysis, log analysis, evidence handling, and threat detection & response, with familiarity in SIEM/EDR and MITRE ATT&CK.