International Contract Bench, Incident Response (DFIR)
Core
Support high-impact digital investigations involving sophisticated cyber threats and real-world security incidents by analyzing live response data and forensic artifacts.
Role type
Contract Incident Response (DFIR) Specialist
Builds
Forensic analysis and incident response reports for ransomware, nation-state threats, and identity-related incidents.
Domain
Cybersecurity / Digital Forensics
Deliverable
client delivery
Required skills
Incident response, digital forensics, network analysis, cloud-native investigations (AWS, GCP, Azure), threat intelligence
Preferred skills
Experience with Windows, macOS, and Linux forensic artifacts, ability to distinguish legitimate activity from threat actor behavior
Technologies
Windows, macOS, Linux, AWS, GCP, Azure, SaaS applications
Responsibilities
Perform incident response and digital forensic investigations involving active threat activity; Analyze live response data and forensic artifacts to identify malicious activity; Investigate Windows, macOS, and Linux environments; Analyze business email compromise and account takeover incidents; Conduct network analysis to identify suspicious activity; Support investigations across cloud-native environments
Seniority
Mid-level to Senior, hands-on IC