Senior DFIR & Cloud Security Investigator

Forensic Focus Limited; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Forensic Focus Limited in Singapore is seeking a DFIR Analyst to perform in-depth digital forensic investigations across endpoints, servers, mobile devices, networks and cloud environments. You will drive containment and recovery actions while correlating security logs from EDR, network and cloud sources to support incident response.

The role requires 4+ years of DFIR experience, strong SQL and Python skills, and practical exposure to EDR telemetry and cloud audit trails within a large

Qualifications

• 4+ years hands-on DFIR experience required.
• Proficiency in SQL and Python.
• Familiarity with EDR telemetry, cloud audit trails and enterprise security operations preferred.

Responsibilities

• Conduct in-depth digital forensic investigations across endpoints, servers, mobile devices, network logs and cloud environments.
• Execute containment and recovery strategies during incidents.
• Correlate security logs from EDR, network and cloud sources to support investigations.
• Contribute to SOAR playbook automation and post-incident reporting.

Skills

DFIR experience

SQL

Python

EDR telemetry

Cloud platforms

Tools

EDR telemetry

Cloud audit trails

Job description

Forensic Focus Limited in Singapore is seeking a DFIR Analyst to perform in-depth digital forensic investigations across endpoints, servers, mobile devices, networks and cloud environments. You will drive containment and recovery actions while correlating security logs from EDR, network and cloud sources to support incident response.

The role requires 4+ years of DFIR experience, strong SQL and Python skills, and practical exposure to EDR telemetry and cloud audit trails within a large