Principal Digital Forensics Investigator

Optum Philippines; Muntinlupa; On-site; PHP 2,800,000 - 3,600,000; Full time

Job summary

Optum Philippines is seeking a Principal Digital Forensics Investigator in the Cyber Defense group. You will establish, mature, and lead enterprise digital forensics capabilities and provide advanced forensic expertise across endpoints, networks, cloud, and identity systems.

You will drive investigations from evidence collection through analysis and reporting, partner with Incident Response and Cyber Threat Intelligence, and guide security improvements with defensible findings.

Qualifications

• 8+ years of experience in cybersecurity, digital forensics, incident response, or related discipline.
• Demonstrated ability to independently lead complex digital forensic investigations from evidence collection to reporting.
• Strong hands-on experience with endpoint, network, cloud, identity, and mobile forensics.
• Experience developing or improving forensic processes, workflows, and chain-of-custody practices.

Responsibilities

• Establish and lead the Digital Forensics and Investigations capability within Cyber Defense.
• Lead complex digital forensic investigations across endpoint, network, cloud, and identity environments.
• Support incident response lifecycle including scoping, containment, eradication, and post-incident improvements.
• Prepare defensible investigative reports, timelines, and executive summaries for stakeholders.
• Collaborate with Legal, Privacy, HR, Compliance, and other teams to ensure evidence integrity.

Skills

Digital Forensics

Incident Response

Lead Investigations

Forensic Analysis

Education

Bachelor’s degree in Cybersecurity/Computer Science

Tools

SIEM

EDR

Forensic Tools

Job description

Optum Philippines is seeking a Principal Digital Forensics Investigator in the Cyber Defense group. You will establish, mature, and lead enterprise digital forensics capabilities and provide advanced forensic expertise across endpoints, networks, cloud, and identity systems.

You will drive investigations from evidence collection through analysis and reporting, partner with Incident Response and Cyber Threat Intelligence, and guide security improvements with defensible findings.