Digital Forensics Incident Responder (JD#11265)

SCIENTE INTERNATIONAL PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

SCIENTE INTERNATIONAL PTE. LTD. in Singapore is seeking a Digital Forensics Incident Responder (DFIR) to join the cyber security team.

You will investigate cyber incidents, perform malware and log analysis, triage threats, and provide forensic guidance across daily operations. A Diploma or Degree in CS/Engineering/IS/InfoSec with 5 years in information security is expected; familiarity with forensic tools and SIEM is required.

Qualifications

• 5 years of work experience in information security focusing on identifying, remediating and investigating cyber security incidents or digital forensics.
• Proficiency with forensic toolkits such as Magnet AXIOM, EnCase, X-Ways, FTK or Autopsy.
• Strong knowledge of malware, IDS and SIEM platforms.
• Excellent written and verbal communication skills.

Responsibilities

• Part of the Cyber Forensic team to provide forensic support to manage Digital Forensic and Incident Responders and ensure smooth operations of daily operations.
• Monitor, triage cyber threat information from news, incoming feeds and logs.
• Assist and support Digital Forensics Incident Responder Analyst to investigate malware outbreaks, security incidents or root-cause analysis.
• Investigate cybersecurity incidents that may involve digital forensic analysis, malware analysis and log analysis.
• Perform cybersecurity threats and vulnerabilities assessment.
• Provide strong technical guidance on investigation and threat assessments.
• Track and manage incidents and handle end-to-end resolution from detection to closure.
• Adhere to SOPs within security operations; review to improve efficiency.
• Maintain situational awareness and stay current with cyber security news and threat actor TTPs.
• Prepare and review incident reports to update stakeholders and report findings.

Skills

InfoSec experience

Digital forensics

Malware analysis

SIEM

Forensic tools

Education

Bachelor's or higher in CS/Engineering/IS/InfoSec

Tools

Magnet AXIOM

EnCase

X-Ways

FTK

Autopsy

Job description

Job Summary

We are looking for enthusiastic and passionate candidate to join the cyber security team as a Digital Forensics Incident Responder (DFIR).

Mandatory Skill-set

• Diploma or Degree in Computer Science, Engineering, Information Systems, Information Security;
• Must have 5 years of work experience in Information Security focusing on identifying remediating and investigation of Cyber Security Incidents or Digital Forensics;
• Experience in forensic tool kits such as Magnet AXIOM, Encase, X-Ways, FTK or Autopsy in imaging, collection, transformation, analysing, gathering, examination, investigation different kinds of digital evidences;
• Good understanding of Malware, Intrusion Detection Systems and SIEM platforms;
• Proactive and self-motivated team player with a strong sense of responsibility and accountability;
• Keen learner and strong passion in self-development and cyber security research;
• Strong problem solving and analytical skills with ability to work in fast paced environment;
• Good written and communication skills.

Desired Skill-set

• Certifications, including GIAC GCFA, GCFE, GCIH or related certifications;
• Experience working in a Security Operation Centre (SOC).

Responsibilities

• Part of the Cyber Forensic team to provide forensic support to manage Digital Forensic and Incident Reponses and ensure smooth operations of daily operations;
• Responsible to monitor, triage cyber threat information from news, incoming feeds and logs;
• Assist and support Digital Forensics Incident Responder Analyst to investigate any malware out-rage, security incidents or root-cause analysis;
• Investigate cybersecurity incidents that may involve digital forensic analysis, malware analysis and log analysis;
• Perform cybersecurity threats and vulnerabilities assessment;
• Provide strong technical guidance on investigation and threat assessments;
• Track and manage incidents and handle end-to-end resolution starting from detection (opening) to closure;
• Adhere to the Standard Operation Procedures (SOP) within the security operations; regularly review them to improve the efficiency;
• Maintain situational awareness and keep current with cyber security news and threat actor Tactics, Techniques and Procedures (TTPs);
• Prepare and review incident reports to update stakeholders and report potential findings from both technical and business perspective.

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639