On-Site DFIR Investigator – Incident Response & Forensics

ARBEIT INFOTECH INC.; Quezon City; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

ARBEIT INFOTECH INC. is seeking a DFIR Analyst to support government agencies in investigating, responding to, and mitigating cybersecurity incidents.

The role covers digital forensics, incident response, threat intelligence, and evidence handling, with on-site duties in Quezon City. The candidate will analyze logs from SIEMs and EDRs, perform forensic imaging, document findings, and contribute to weekly metrics.

Qualifications

• 3+ years of experience in Incident Response and/or Digital Forensics.
• Hands-on experience in incident investigation, malware analysis, log analysis, and evidence handling.
• Familiarity with SIEM, EDR, forensic imaging, and digital investigation tools.
• Knowledge of NIST IR lifecycle and/or SANS methodologies.
• Working knowledge of MITRE ATT&CK.
• Strong understanding of Windows/Linux systems and network security concepts.
• Strong technical writing and incident reporting skills.

Responsibilities

• Triage and investigate security events, alerts, and logs from government systems.
• Investigate, contain, and mitigate cybersecurity incidents in coordination with DFIR teams.

Skills

Incident Response

Digital Forensics

Log Analysis

Threat Intelligence

Windows & Linux

Technical Writing

Tools

SIEM

EDR

Forensic Imaging

Job description

ARBEIT INFOTECH INC. is seeking a DFIR Analyst to support government agencies in investigating, responding to, and mitigating cybersecurity incidents.

The role covers digital forensics, incident response, threat intelligence, and evidence handling, with on-site duties in Quezon City. The candidate will analyze logs from SIEMs and EDRs, perform forensic imaging, document findings, and contribute to weekly metrics.