Lead Linux Forensics & Incident Response Engineer

Hallmark Global Technologies Limited; San Jose (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Hallmark Global Technologies Limited is seeking a Senior/Staff Digital Forensics and IR Engineer to join our cybersecurity team. You will lead investigations involving Unix/Linux servers, cloud workloads, containers, and enterprise networks, developing detection and response capabilities.

The role demands 6 years of hands-on cybersecurity and forensics experience, strong Linux internals knowledge, and the ability to communicate findings to technical and executive audiences under pressure.

Qualifications

• 6 years of professional experience in cybersecurity, digital forensics, incident response, or related discipline.
• Strong hands-on experience with Unix/Linux operating systems and enterprise infrastructure.
• Knowledge of Linux internals, filesystems, processes, memory, and networking.

Responsibilities

• Lead complex digital forensic investigations involving Unix/Linux servers, infrastructure, endpoints, cloud workloads, and enterprise applications.
• Perform forensic acquisition, preservation, analysis, and documentation of compromised systems.
• Investigate security incidents including credential theft, malware/rootkits, privilege escalation, lateral movement, persistence, data exfiltration, insider threats, and supply-chain compromises.
• Develop and maintain forensic playbooks, investigation procedures, and incident response methodologies.
• Conduct live-response investigations minimizing evidence contamination.

Skills

Unix/Linux forensics

Incident response

Scripting (Python/Bash)

SIEM/EDR/XDR

MITRE ATT&CK

Cloud/Container forensics

Network security

Tools

EnCase

FTK

Volatility

KAPE

Sleuth Kit

Job description

Hallmark Global Technologies Limited is seeking a Senior/Staff Digital Forensics and IR Engineer to join our cybersecurity team. You will lead investigations involving Unix/Linux servers, cloud workloads, containers, and enterprise networks, developing detection and response capabilities.

The role demands 6 years of hands-on cybersecurity and forensics experience, strong Linux internals knowledge, and the ability to communicate findings to technical and executive audiences under pressure.