Job Description
We are seeking a highly skilled Senior DFIR Specialist to lead and execute complex cybersecurity investigations and incident response activities across enterprise environments.
This a contract opportunity on an as needed basis.
This role is responsible for delivering end-to-end incident response, including forensic analysis, containment, eradication, recovery, and post-incident improvement.
This is a contract role.
Key Responsibilities
- Conduct advanced forensic investigations across Windows environments, Oracle, and Linux systems, Enterprise platforms (Oracle applications, .NET, Microsoft 365 stack including Exchange, SharePoint, OneDrive)
- Perform (1) Evidence acquisition (disk, memory, cloud artifacts), (2) Volatile memory and disk analysis, (3) Log and telemetry correlation across endpoints and cloud systems
- Reconstruct attack timelines, including (1) Initial access vector, (2) Lateral movement, (3) Pri...