DFIR Analyst (Digital Forensics & Incident Response)

Arbeit Infotech; Quezon City; On-site; PHP 520,000 - 760,000; Full time

Job summary

Arbeit Consulting in the Philippines seeks a DFIR Analyst to triage, investigate security events, and support cybersecurity operations. You will perform incident analysis, containment, eradication, and recovery activities, and conduct digital forensics on disk, memory, network, and endpoint artifacts.

The role requires hands-on experience in incident investigation, malware analysis, log analysis, evidence handling, and threat detection & response, with familiarity in SIEM/EDR and MITRE ATT&CK.

Qualifications

• Minimum 3 years of experience in Digital Forensics, Incident Response, SOC, Cybersecurity Operations, or related roles.
• Hands-on experience in Incident Investigation.
• Hands-on experience in Malware Analysis.
• Hands-on experience in Log Analysis.
• Hands-on experience in Evidence Handling.
• Hands-on experience in Threat Detection & Response.
• Familiarity with SIEM, EDR, forensic imaging, and investigation tools.
• Strong understanding of NIST Incident Response Lifecycle.
• Strong understanding of MITRE ATT&CK.
• Strong understanding of Network Security.
• Strong understanding of Operating Systems & Endpoint Security.
• Strong technical writing and incident documentation skills.
• Possess at least two (2) of the following certifications (or equivalent): CCDL1, CCDL2, Security+, CySA+, eCIH.

Responsibilities

• Triage and investigate security events and alerts.
• Perform incident analysis, containment, eradication, and recovery activities.
• Conduct digital forensic investigations on disk, memory, network, and endpoint artifacts.
• Analyze logs, threats, malware behavior, and attacker activities.
• Correlate findings across SIEM, EDR, cloud, and threat intelligence platforms.
• Identify Indicators of Compromise (IOCs) and attacker TTPs.
• Create incident reports, technical findings, and recommendations.
• Participate in cybersecurity exercises, incident simulations, and knowledge-sharing activities.
• Contribute to operational reporting and incident metrics.

Skills

Incident Investigation

Malware Analysis

Log Analysis

Evidence Handling

Threat Detection & Response

Technical Writing

Tools

SIEM

EDR

Forensic Imaging

Job description

DFIR Analyst (Digital Forensics & Incident Response) responsible for triaging and investigating security events, performing incident analysis and digital forensic investigations, and contributing to cybersecurity operations.

Key responsibilities

Triage and investigate security events and alerts

Perform incident analysis, containment, eradication, and recovery activities

Conduct digital forensic investigations on disk, memory, network, and endpoint artifacts

Analyze logs, threats, malware behavior, and attacker activities

Correlate findings across SIEM, EDR, cloud, and threat intelligence platforms

Identify Indicators of Compromise (IOCs) and attacker TTPs

Create incident reports, technical findings, and recommendations

Participate in cybersecurity exercises, incident simulations, and knowledge-sharing activities

Contribute to operational reporting and incident metrics

About you

Minimum 3 years of experience in Digital Forensics, Incident Response, SOC, Cybersecurity Operations, or related roles

Hands-on experience in Incident Investigation

Hands-on experience in Malware Analysis

Hands-on experience in Log Analysis

Hands-on experience in Evidence Handling

Hands-on experience in Threat Detection & Response

Familiarity with SIEM, EDR, forensic imaging, and investigation tools

Strong understanding of NIST Incident Response Lifecycle

Strong understanding of MITRE ATT&CK

Strong understanding of Network Security

Strong understanding of Operating Systems & Endpoint Security

Strong technical writing and incident documentation skills

Possess at least two (2) of the following certifications (or equivalent): CCDL1, CCDL2, Security+, CySA+, eCIH

Information Technology Services 11-50 employees

WHO WE ARE

Arbeit is an IT-driven, Innovation-obsessed Consulting Firm with years of unparalleled expertise at helping Telco's and other telecom-connected enterprises achieve enviable success in their business. Our forte lies in delivering goal-based software, engineering, and operations services for our clients across telecommunication industry. Working with some of the leading, global communications Service Providers (CSPs), Independent Software Vendors (ISVs), Mobile Operators and Network Equipment Manufacturers (NEMs), we have carved out a strong position for ourselves in the market – the outcome of our dedication, transparency and passion to exceed expectations of our clients.

We provide an array of result-oriented, telecom-specific services for our clients with more focus on driving efficiency in business operations of our clients, rooting out complexities in their business processes, creating easy way to help them overcome barriers and be successful in all their business endeavors.

OUR ROLES

We, with our team of experienced consultants build, enhance and manage multiple operations, (re)design, and implement billing, fulfilment, and assurance processes and other connected IT architectures. Our clients can rely on us to assume role of project manager for introduction of innovative services, complete business transformation or rollouts of technologies. Our certified QA and Testing experts make sure each and every project or process is replete in quality and help reach desired level of success in operations.

At Arbeit Consulting, we don’t limit ourselves to companies within the telecom and internet market, we deliver services for other related markets too. Many of the leading non-telecom companies such as energy companies also rely on us for resolving their key telecommunication issues.

WHO WE ARE

Arbeit is an IT-driven, Innovation-obsessed Consulting Firm with years of unparalleled expertise at helping Telco's and other telecom-connected enterprises achieve enviable success in their business. Our forte lies in delivering goal-based software, engineering, and operations services for our clients across telecommunication industry. Working with some of the leading, global communications Service Providers (CSPs), Independent Software Vendors (ISVs), Mobile Operators and Network Equipment Manufacturers (NEMs), we have carved out a strong position for ourselves in the market – the outcome of our dedication, transparency and passion to exceed expectations of our clients.

We provide an array of result-oriented, telecom-specific services for our clients with more focus on driving efficiency in business operations of our clients, rooting out complexities in their business processes, creating easy way to help them overcome barriers and be successful in all their business endeavors.

OUR ROLES

We, with our team of experienced consultants build, enhance and manage multiple operations, (re)design, and implement billing, fulfilment, and assurance processes and other connected IT architectures. Our clients can rely on us to assume role of project manager for introduction of innovative services, complete business transformation or rollouts of technologies. Our certified QA and Testing experts make sure each and every project or process is replete in quality and help reach desired level of success in operations.

At Arbeit Consulting, we don’t limit ourselves to companies within the telecom and internet market, we deliver services for other related markets too. Many of the leading non-telecom companies such as energy companies also rely on us for resolving their key telecommunication issues.