DFIR Analyst: Incident Response & Digital Forensics

Trilliuminfosec; Lahore; On-site; PKR 1,800,000 - 2,800,000; Full time

Job summary

Trillium Information Security Systems (TISS) in Lahore, Pakistan, is hiring a Digital Forensics & Incident Response (DFIR) Analyst with 1–1.5 years hands-on experience in compromise assessments, incident response, digital forensics, and cybersecurity investigations. You will investigate security incidents across Windows and Linux, analyze IOCs and artifacts, and work with SIEM/EDR logs to trace attacker techniques.

Strong analytical skills and the ability to document findings are essential.

Qualifications

• 1–1.5 years of hands-on DFIR and incident response experience.
• Experience in compromise assessments, incident response, digital forensics, and cybersecurity investigations.
• Strong knowledge of Windows and Linux forensic artifacts and event log analysis.
• Experience with SIEM, EDR, and security log analysis.
• Understanding of MITRE ATT&CK framework and common attack techniques.
• Familiarity with networking fundamentals (TCP/IP, DNS, HTTP/HTTPS).
• Bachelor's degree in Cybersecurity/CS/IT or equivalent practical experience.
• Certifications such as CHFI or eCDFP are a plus.

Responsibilities

• Conduct compromise assessments and threat hunting across enterprise environments.
• Investigate cybersecurity incidents including malware, ransomware, unauthorized access, and system compromises.
• Perform digital forensic investigations of Windows and Linux systems, including evidence collection and analysis.
• Analyze forensic artifacts such as Windows Event Logs, Registry, Prefetch and other system artifacts.
• Investigate persistence, privilege escalation, lateral movement, and data exfiltration.
• Analyze SIEM and EDR logs, endpoint telemetry, and network traffic to identify malicious activities.
• Prepare technical investigation reports, findings, and remediation recommendations.

Skills

DFIR

Incident response

Forensics

Windows basics

Linux basics

SIEM

EDR

MITRE ATT&CK

Event log analysis

Analytical skills

Communication

PowerShell

Python

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science

Tools

QRadar

Splunk

Microsoft Sentinel

Defender for Endpoint

CrowdStrike

PowerShell

Python

Job description

Trillium Information Security Systems (TISS) in Lahore, Pakistan, is hiring a Digital Forensics & Incident Response (DFIR) Analyst with 1–1.5 years hands-on experience in compromise assessments, incident response, digital forensics, and cybersecurity investigations. You will investigate security incidents across Windows and Linux, analyze IOCs and artifacts, and work with SIEM/EDR logs to trace attacker techniques.

Strong analytical skills and the ability to document findings are essential.