DFIR Analyst | Cyber Security Investigations | Cloud

Forensic Focus Limited; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Forensic Focus Limited in Singapore is seeking a DFIR Analyst to perform in-depth digital forensic investigations across endpoints, servers, mobile devices, networks and cloud environments. You will drive containment and recovery actions while correlating security logs from EDR, network and cloud sources to support incident response.

The role requires 4+ years of DFIR experience, strong SQL and Python skills, and practical exposure to EDR telemetry and cloud audit trails within a large

Qualifications

• 4+ years hands-on DFIR experience required.
• Proficiency in SQL and Python.
• Familiarity with EDR telemetry, cloud audit trails and enterprise security operations preferred.

Responsibilities

• Conduct in-depth digital forensic investigations across endpoints, servers, mobile devices, network logs and cloud environments.
• Execute containment and recovery strategies during incidents.
• Correlate security logs from EDR, network and cloud sources to support investigations.
• Contribute to SOAR playbook automation and post-incident reporting.

Skills

DFIR experience

SQL

Python

EDR telemetry

Cloud platforms

Tools

EDR telemetry

Cloud audit trails

Job description

# DFIR Analyst | Cyber Security Investigations | Cloud*Randstad Singapore***Singapore**Onsite · Mid · Full-time### The RoleThe analyst conducts in-depth digital forensic investigations across endpoints, servers, mobile devices, network logs and cloud environments. Day-to-day responsibilities include executing containment and recovery strategies, correlating security logs from EDR, network and cloud sources, and contributing to SOAR playbook automation and post-incident reporting.### Skills & ExperienceAt least four years of hands-on DFIR experience is required, along with proficiency in SQL and Python. Familiarity with EDR telemetry, cloud audit trails and enterprise security operations is expected, and practical exposure to cloud platforms is strongly preferred.### Who It SuitsThis role suits an experienced DFIR practitioner ready to work within a well-resourced enterprise security function. Candidates who combine solid forensic investigation skills with scripting ability and a growing cloud background will thrive in this headquarters-based position in Singapore.