Cybersecurity Consultant / Senior Cybersecurity Consultant (DFIR), NCIRC

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Cyber Security Agency of Singapore (CSA) seeks a DFIR engineer to conduct forensics analysis across endpoints and network logs, supporting investigations and incident response. The role includes managing the forensics lab and infrastructure, and evaluating new technologies to improve analysis.

Suitable candidates may be considered for a Senior Consultant role with 5+ years of relevant experience. The ideal candidate holds a IT/security degree, strong OS knowledge, scripting skills, and relevant

Qualifications

• Bachelor’s degree in Information Technology, Computer Security, Computer Science or related field.
• Strong understanding of Windows and Linux operating systems.
• Experience performing forensics across Windows, Mac and Linux platforms.
• Ability to analyze network and application logs.
• Good written and communication skills.
• Certifications such as EnCase ACE, AccessData ACE, SANS GCFE, GCFA or GNFA are advantageous.
• Experience with scripting (Python or PowerShell) to automate forensic tasks.
• Knowledge of AI/LLMs in cybersecurity or forensics is a plus.
• Familiarity with cloud technologies and modern development environments.

Responsibilities

• Conduct forensics analysis on endpoints and network logs to support investigations.
• Facilitate orderly and efficient response to cyber incidents.
• Manage the forensics lab and its supporting infrastructure.
• Identify new technologies to enhance forensic analysis.

Skills

Forensics analysis

Endpoint investigations

Network log analysis

Python scripting

PowerShell scripting

Windows and Linux

AI/LLMs in cybersecurity

Cloud & containers

Education

Bachelor’s degree in IT/CS or related field

Tools

EnCase

AccessData Certified Examiner

SANS GCFE

GIAC GCFA

GIAC GNFA

Job description

The key responsibility of an engineer in the Digital Forensics and Incident Response (DFIR) team is to facilitate an orderly and efficient response to cyber incidents. You are required to conduct forensics analysis on endpoints and network logs to support the investigations. Your responsibilities may also include managing the forensics lab and its supporting infrastructure. In addition, you will also be required to identify new technologies to enhance forensics analysis. Candidates with more than 5 years of relevant experience may be considered for the Senior Consultant role.

Requirements

• Bachelor’s degree preferably in Information Technology, Computer Security, Computer Science, or any other relevant fields;
• Good understanding of operating systems such as Windows and Linux;
• Able to perform forensics analysis across Windows, Mac and Linux Platform;
• Ability to analyze network and application logs;
• A team player with strong written and communication skills;
• Professional certifications such as EnCase Certified Examiner, AccessData Certified Examiner, SANS GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), or GIAC Network Forensic Analyst (GNFA) would be advantageous.
• Experience in scripting or software development using languages such as Python, PowerShell or other relevant programming languages to automate and enhance forensic analysis;
• Knowledge or experience in applying Artificial Intelligence (AI), Large Language Models (LLMs) to cybersecurity or digital forensics use cases;
• Familiarity with cloud technologies, containerisation and modern development environments.