Cybersecurity DFIR Consultant-Forensics & Incident Response

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Cyber Security Agency of Singapore (CSA) seeks a DFIR engineer to conduct forensics analysis across endpoints and network logs, supporting investigations and incident response. The role includes managing the forensics lab and infrastructure, and evaluating new technologies to improve analysis.

Suitable candidates may be considered for a Senior Consultant role with 5+ years of relevant experience. The ideal candidate holds a IT/security degree, strong OS knowledge, scripting skills, and relevant

Qualifications

• Bachelor’s degree in Information Technology, Computer Security, Computer Science or related field.
• Strong understanding of Windows and Linux operating systems.
• Experience performing forensics across Windows, Mac and Linux platforms.
• Ability to analyze network and application logs.
• Good written and communication skills.
• Certifications such as EnCase ACE, AccessData ACE, SANS GCFE, GCFA or GNFA are advantageous.
• Experience with scripting (Python or PowerShell) to automate forensic tasks.
• Knowledge of AI/LLMs in cybersecurity or forensics is a plus.
• Familiarity with cloud technologies and modern development environments.

Responsibilities

• Conduct forensics analysis on endpoints and network logs to support investigations.
• Facilitate orderly and efficient response to cyber incidents.
• Manage the forensics lab and its supporting infrastructure.
• Identify new technologies to enhance forensic analysis.

Skills

Forensics analysis

Endpoint investigations

Network log analysis

Python scripting

PowerShell scripting

Windows and Linux

AI/LLMs in cybersecurity

Cloud & containers

Education

Bachelor’s degree in IT/CS or related field

Tools

EnCase

AccessData Certified Examiner

SANS GCFE

GIAC GCFA

GIAC GNFA

Job description

Cyber Security Agency of Singapore (CSA) seeks a DFIR engineer to conduct forensics analysis across endpoints and network logs, supporting investigations and incident response. The role includes managing the forensics lab and infrastructure, and evaluating new technologies to improve analysis.

Suitable candidates may be considered for a Senior Consultant role with 5+ years of relevant experience. The ideal candidate holds a IT/security degree, strong OS knowledge, scripting skills, and relevant