Digital Forensics Incident Responder

SCIENTE; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

SCIENTE is seeking a Digital Forensics Incident Responder (DFIR) to join our cyber security team in Singapore. The role focuses on identifying, remediating and investigating cyber security incidents through digital forensics, malware analysis and log review.

You will work with a team to triage threats and provide end-to-end incident resolution. The ideal candidate has a diploma or degree in a relevant field and at least five years of experience in information security, with hands-on experience

Qualifications

• Diploma or Degree in Computer Science, Engineering, Information Systems, or Information Security.
• At least 5 years of work experience in information security focusing on identifying, remediating and investigating cyber security incidents or digital forensics.
• Experience with forensic toolkits for imaging, collection, transformation, analysis, and evidence handling.

Responsibilities

• Provide forensic support to manage digital forensics and incident responses.
• Monitor and triage cyber threat information from news, feeds and logs.
• Assist investigators to perform malware analysis, root-cause analysis and log reviews.
• Investigate cybersecurity incidents involving digital forensics and malware analysis.
• Conduct threats and vulnerabilities assessments.
• Provide technical guidance on investigations and threat assessments.
• Track incidents from detection to closure.
• Adhere to SOPs and keep security operations up to date.
• Maintain situational awareness of cyber security news and threat actor TTPs.
• Prepare and review incident reports for stakeholders.

Skills

Digital forensics

Cyber incident response

Malware analysis

Log analysis

SIEM monitoring

Communication skills

Teamwork

Investigative mindset

Education

Bachelor’s/Diploma in Computer Science/Engineering/Information Security

Tools

Magnet AXIOM

Encase

X-Ways

FTK

Autopsy

Job description

We are looking for enthusiastic and passionate candidate to join the cyber security team as a Digital Forensics Incident Responder (DFIR).

Mandatory Skill-set

• Diploma or Degree in Computer Science, Engineering, Information Systems, Information Security;
• Must have 5 years of work experience in Information Security focusing on identifying remediating and investigation of Cyber Security Incidents or Digital Forensics;
• Experience in forensic tool kits such as Magnet AXIOM, Encase, X-Ways, FTK or Autopsy in imaging, collection, transformation, analysing, gathering, examination, investigation different kinds of digital evidences;
• Good understanding of Malware, Intrusion Detection Systems and SIEM platforms;
• Proactive and self-motivated team player with a strong sense of responsibility and accountability;
• Keen learner and strong passion in self-development and cyber security research;
• Strong problem solving and analytical skills with ability to work in fast paced environment;
• Good written and communication skills.

Desired Skill-set

• Certifications, including GIAC GCFA, GCFE, GCIH or related certifications;
• Experience working in a Security Operation Centre (SOC).

Responsibilities

• Part of the Cyber Forensic team to provide forensic support to manage Digital Forensic and Incident Reponses and ensure smooth operations of daily operations;
• Responsible to monitor, triage cyber threat information from news, incoming feeds and logs;
• Assist and support Digital Forensics Incident Responder Analyst to investigate any malware out-rage, security incidents or root-cause analysis;
• Investigate cybersecurity incidents that may involve digital forensic analysis, malware analysis and log analysis;
• Perform cybersecurity threats and vulnerabilities assessment;
• Provide strong technical guidance on investigation and threat assessments;
• Track and manage incidents and handle end-to-end resolution starting from detection (opening) to closure;
• Adhere to the Standard Operation Procedures (SOP) within the security operations; regularly review them to improve the efficiency;
• Maintain situational awareness and keep current with cyber security news and threat actor Tactics, Techniques and Procedures (TTPs);
• Prepare and review incident reports to update stakeholders and report potential findings from both technical and business perspective.

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.