Digital Forensics Incident Responder

sggovterp; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

sggovterp is seeking an experienced Cybersecurity Incident Investigator to join its SOC-focused team in Singapore. The role involves investigating cybersecurity incidents using digital forensics, malware, and log analysis, and providing technical guidance on investigations and threat assessments.

Applicants should have 5+ years in cyber security incident investigations or digital forensics, a Diploma in Information Security or a Bachelor’s in Engineering/CS/InfoSec, and relevant GIAC

Qualifications

• Diploma in Information Security or Bachelor’s degree in Engineering/CS/InfoSec
• 5+ years of experience in cyber security incident investigations or digital forensics
• Relevant professional certifications such as GIAC GCFA/GCFE/GCIH

Responsibilities

• Collaborate with the team to ensure smooth daily operations
• Work with DFIR analysts to respond to security incidents and perform root cause analysis
• Investigate cybersecurity incidents involving digital forensics, malware, and log analysis
• Provide technical guidance on investigations and threat assessments
• Maintain incident response playbooks and processes
• Prepare incident reports for stakeholders

Skills

Analytical

Attention to detail

Communication skills

Interpersonal skills

Willingness to learn

Education

Bachelor's degree in Engineering or CS or Information Security

Diploma in Information Security

Tools

Magnet AXIOM

Encase

X-Ways

FTK

Autopsy

Job description

Responsibilities

• Work with current team and ensure smooth operations of daily operations
• Work with DFIR analysts to ensure timely response to security incidents, root cause analysis and closure of incident
• Investigate cybersecurity incidents that may involve digital forensic analysis, malware analysis and log analysis
• Able to provide strong technical guidance on investigation and threat assessments
• Assist the team in tasks prioritisation
• Assess cybersecurity threats and vulnerabilities
• Ensure that incident response playbooks and processes are maintained and updated
• Maintain situational awareness and keep current with cyber security news and threat actor Tactics, Techniques and Procedures (TTPs)
• Prepare and review incident reports to update stakeholders

Requirements

• Diploma in Information Security; or Bachelor’s degree in engineering/Computer Science/Information Security or equivalent
• 5 years or more related work experience in cyber security incident investigations or digital forensics
• Relevant professional certifications, including GIAC GCFA, GCFE, GCIH
• Proficiency in Forensic toolkits such as Magnet AXIOM, Encase, X-Ways, FTK or Autopsy
• Experience working in a Security Operation Centre (SOC) is advantageous
• Analytical and detailed
• Good communication and interpersonal skills
• Willingness to learn

This position will commensurate with experience

Only shortlisted applicants will be notified

#LI-JL3