Cybersecurity Consultant / Senior Cybersecurity Consultant (DFIR), NCIRC

Cyber Security Agency of Singapore; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

The Cyber Security Agency of Singapore is seeking an engineer in the DFIR team to conduct forensics analysis on endpoints and network logs to support investigations.

You will manage the forensics lab and its infrastructure, and identify new technologies to enhance analysis. Senior Consultant level considered for candidates with 5+ years of relevant experience.

Qualifications

• Bachelor’s degree in IT, CS, or related fields.
• Good understanding of Windows and Linux.
• Experience performing forensics across Windows, Mac and Linux.
• Ability to analyze network and application logs.
• Strong written and communication skills.
• Certifications such as EnCase, AccessData, GCFE/GCFA or GNFA are advantageous.
• Experience scripting in Python or PowerShell to automate analysis.
• Knowledge of AI/LLMs in cybersecurity or digital forensics.
• Familiarity with cloud technologies, containers and modern dev environments.

Responsibilities

• Conduct forensics analysis on endpoints and network logs to support investigations.
• Manage the forensics lab and its supporting infrastructure.
• Identify new technologies to enhance forensics analysis.

Skills

Forensics analysis

Endpoint forensics

Log analysis

Windows & Linux

Python scripting

PowerShell scripting

AI/LLMs in cybersecurity

Cloud technologies

Teamwork & communication

Lab management

Education

Bachelor's degree in IT / Cyber Security / Computer Science

Tools

EnCase Certified Examiner

AccessData Certified Examiner

SANS GIAC Certified Forensic Examiner (GCFE)

SANS GIAC Certified Forensic Analyst (GCFA)

GIAC Network Forensic Analyst (GNFA)

Job description

Description:

The key responsibility of an engineer in the Digital Forensics and Incident Response (DFIR) team is to facilitate an orderly and efficient response to cyber incidents. You are required to conduct forensics analysis on endpoints and network logs to support the investigations. Your responsibilities may also include managing the forensics lab and its supporting infrastructure. In addition, you will also be required to identify new technologies to enhance forensics analysis. Candidates with more than 5 years of relevant experience may be considered for the Senior Consultant role.

Requirements:

• Bachelor’s degree preferably in Information Technology, Computer Security, Computer Science, or any other relevant fields;
• Good understanding of operating systems such as Windows and Linux;
• Able to perform forensics analysis across Windows, Mac and Linux Platform;
• Ability to analyze network and application logs;
• A team player with strong written and communication skills;
• Professional certifications such as EnCase Certified Examiner, AccessData Certified Examiner, SANS GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), or GIAC Network Forensic Analyst (GNFA) would be advantageous.;
• Experience in scripting or software development using languages such as Python, PowerShell or other relevant programming languages to automate and enhance forensic analysis;
• Knowledge or experience in applying Artificial Intelligence (AI), Large Language Models (LLMs) to cybersecurity or digital forensics use cases;
• Familiarity with cloud technologies, containerisation and modern development environments.