Digital Forensic And Cybersecurity Incident Responder

Experteer Overview As a Cybersecurity Incident Responder, you lead and support incident response and digital forensics across endpoints, identities, networks, and cloud.You work with SOC, infrastructure, and application teams to minimize business impact and drive improvements in detection and response.You will manage major incidents, participate in on-call rotations, and help shape repeatable playbooks and use cases.This role offers meaningful impact by protecting information systems and data at scale, with a strong emphasis on collaboration and rapid problem-solving.Compensaciones / Beneficios - Monitor and analyze security infrastructure to identify threats and incidents - Lead critical security incident investigations - Escalate ownership during major incidents and participate in on-call rotations - Analyze logs, network traffic, and data sources to determine root causes - Improve incident detection and response workflows and playbooks - Collaborate cross-functionally to implement and refine use cases and procedures - Serve as escalation point for analysts on the team - Evaluate and recommend new tools to boost IR capabilities - Preserve evidence and perform digital forensics operations on endpoints (logs, memory, images)Responsabilidades - 5+ years hands-on incident response experience - Hands-on digital forensics experience with evidence collection and analysis from endpoints - Experience in at least two: Malware Analysis, Cloud Security, Vulnerability Management, or Operational Technology - Scripting experience (Python, PowerShell, or Bash) - Solid understanding of Linux and Windows architectures, networking, and packet analysis - Experience with firewalls, IDS/IPS, anti-malware, SIEM, and EDR tools - Strong problem-solving skills and ability to work under high-severity pressure - Excellent written and verbal communication for documenting findings and presenting recommendations - Advanced knowledge of common attack techniques (exploits, network attacks, phishing, malware) - Knowledge of integrating AI/LLM capabilities into IR (plus) - Red Team experience (plus) - AWS knowledge (plus) - Security certifications (CRTO, OSCP, GCIH, GCFA, GEIR) (plus)Requisitos principales - Flexible working conditions - Life and accident insurance - Health insurance at a competitive price - Investment in your learning and development - Gym membership discounts

Experience in at least two: Malware Analysis, Cloud Security, Vulnerability Management, or Operational Technology - Scripting experience (Python, PowerShell, or Bash) - Solid understanding of Linux and Windows architectures, networking, and packet analysis - Experience with firewalls, IDS/IPS, anti-malware, SIEM, and EDR tools - Strong problem-solving skills and ability to work under high-severity pressure - Excellent written and verbal communication for documenting findings and presenting recommendations - Advanced knowledge of common attack techniques (exploits, network attacks, phishing, malware) - Knowledge of integrating AI/LLM capabilities into IR (plus) - Red Team experience (plus) - AWS knowledge (plus) - Security certifications (CRTO, OSCP, GCIH, GCFA, GEIR) (plus)Requisitos principales - Flexible working conditions - Life and accident insurance - Health insurance at a competitive price - Investment in your learning and development - Gym membership discounts