DFIR Analyst: Incident Response & Forensics

SentinelOne; Singapore; On-site; SGD 90,000 - 150,000; Full time

Benefits offered by this job

RSUs

ESPP

Leave benefits

Parental leave

Medical benefits

EAP

Home office allowance

Internet allowance

Mobile allowance

Flexible benefits

Job summary

SentinelOne in Singapore is seeking a forensics-focused incident responder with 2+ years in digital forensics, IR, or threat hunting. You will analyze Windows artifacts, preserve evidence, and support ransomware and identity compromise investigations.

You will work with X-Ways Forensics, Axiom, FTK, SentinelOne EDR/XDR and SIEM tools, and contribute to reports, recommendations, and knowledge sharing while maintaining rigorous chain-of-custody standards.

Qualifications

• Bachelor’s or Master’s degree in Digital Forensics, Cybersecurity, Computer Science, or related field, or equivalent practical self‑study.
• 2+ years of hands‑on experience in digital forensics, incident response, or threat hunting, ideally in consulting/services.
• Comfort analyzing Windows environments and forensic artifacts; understanding of forensic methodologies and evidence handling.

Responsibilities

• Conduct EDR-driven incident response and forensic analysis across endpoints, networks, and cloud environments.
• Preserve forensic evidence with chain-of-custody procedures; assist case intake with initial technical details.
• Support malware and memory analysis under senior guidance.
• Contribute to containment actions and security hardening recommendations; document investigations thoroughly.
• Prepare customer-facing status updates and investigative reports; distill findings for stakeholders.
• Follow SOPs and escalate questions to Technical Lead or Engagement Manager as needed.
• Maintain awareness of threats and attacker techniques; contribute to knowledge base.

Skills

Digital forensics

Incident response

Threat hunting

Windows forensics

Network protocols

Scripting & automation

Strong communication

Under pressure

Cloud exposure

Education

Bachelor's or Master's in Digital Forensics, Cybersecurity, CS

Tools

X-Ways Forensics

Axiom

FTK

EDR/XDR platforms

SIEMs

Job description

SentinelOne in Singapore is seeking a forensics-focused incident responder with 2+ years in digital forensics, IR, or threat hunting. You will analyze Windows artifacts, preserve evidence, and support ransomware and identity compromise investigations.

You will work with X-Ways Forensics, Axiom, FTK, SentinelOne EDR/XDR and SIEM tools, and contribute to reports, recommendations, and knowledge sharing while maintaining rigorous chain-of-custody standards.