Senior Digital Forensics & Incident Response Lead

Mynt; Capital District; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

GCash is seeking a Digital Forensics Investigator to lead investigations of cyber incidents, data breaches, and other cybercrimes, ensuring thorough evidence collection. You will preserve digital evidence, create forensic images, maintain chain of custody, and work with IT, security, legal, and external agencies throughout investigations.

You will analyze evidence, reconstruct events and timelines, contribute to incident response plans, and present findings clearly to technical and non-technical

Qualifications

• Oversee the investigation of cyber incidents, including data breaches, unauthorized access, malware infections, and other cybercrimes.
• Develop investigation plans and strategies to ensure comprehensive evidence collection and analysis.
• Coordinate with internal teams (e.g., IT, security, legal) and external stakeholders (e.g., law enforcement, regulatory bodies) during investigations.
• Ensure the proper identification, collection, and preservation of digital evidence following legal and organizational protocols.
• Use specialized tools and techniques to create forensic images of digital devices and storage media.
• Maintain a secure chain of custody for all evidence collected.
• Analyze digital evidence to uncover relevant information, such as file history, user activities, network traffic, and deleted data.
• Utilize advanced forensic tools and methodologies, such as disk imaging, memory analysis, and network forensics.
• Reconstruct events and timelines based on the analysis of digital artifacts.
• Participate in or lead incident response efforts for significant cyber incidents.
• Work with other cybersecurity teams to mitigate ongoing threats and prevent further damage.
• Develop and maintain incident response plans and protocols.
• Prepare detailed reports outlining the findings of investigations, including the methods used and evidence discovered.
• Present evidence and conclusions in a clear and concise manner for both technical and non-technical stakeholders.
• Provide expert testimony in legal proceedings, when required.
• Stay updated on the latest trends, tools, and techniques in digital forensics and cybersecurity.
• Implement new technologies and methodologies to enhance forensic capabilities.
• Conduct regular training sessions for the team and other departments on digital forensics and incident response.

Job description

GCash is seeking a Digital Forensics Investigator to lead investigations of cyber incidents, data breaches, and other cybercrimes, ensuring thorough evidence collection. You will preserve digital evidence, create forensic images, maintain chain of custody, and work with IT, security, legal, and external agencies throughout investigations.

You will analyze evidence, reconstruct events and timelines, contribute to incident response plans, and present findings clearly to technical and non-technical