DFIR Analyst: Incident Response & Digital Forensics

TISS; Lahore; Vor Ort; PKR 900.000 - 1.500.000; Vollzeit

Zusammenfassung

Trillium Information Security Systems (TISS) is seeking a Digital Forensics & Incident Response (DFIR) Analyst with 1–1.5 years of hands-on experience. The role involves compromise assessments, incident response, and cyber investigations across Windows and Linux environments.

The ideal candidate will analyze IOCs, forensic artifacts, and SIEM/EDR data, and contribute to containment, remediation, and root-cause analysis within a security operations team in Pakistan.

Qualifikationen

• 1–1.5 years hands-on DFIR, compromise assessments or related investigations.
• Strong understanding of Windows OS and forensic artifacts.
• Experience with Linux forensics and investigation techniques.
• Practical experience with SIEM/EDR and security log analysis.
• Knowledge of incident response methodologies and MITRE ATT&CK framework.

Aufgaben

• Conduct compromise assessments and threat hunting across enterprise environments.
• Investigate cybersecurity incidents including malware infections and ransomware.
• Perform digital forensic investigations on Windows and Linux systems.
• Analyze forensic artifacts such as Windows Event Logs, Registry, Prefetch, Amcache, Shimcache.
• Investigate suspicious processes, persistence, privilege escalation, lateral movement and data exfiltration.
• Analyze SIEM/EDR logs and network telemetry to identify malicious activity.
• Support containment, eradication, recovery, and root cause analysis.
• Prepare investigation reports and remediation recommendations.

Kenntnisse

DFIR

Incident response

Digital forensics

Threat hunting

MITRE ATT&CK

IOCs

Event log analysis

Ausbildung

Bachelor's degree in Cybersecurity/CS/IT

Tools

IBM QRadar

Splunk

Microsoft Sentinel

Microsoft Defender for Endpoint

CrowdStrike

Jobbeschreibung

Trillium Information Security Systems (TISS) is seeking a Digital Forensics & Incident Response (DFIR) Analyst with 1–1.5 years of hands-on experience. The role involves compromise assessments, incident response, and cyber investigations across Windows and Linux environments.

The ideal candidate will analyze IOCs, forensic artifacts, and SIEM/EDR data, and contribute to containment, remediation, and root-cause analysis within a security operations team in Pakistan.