DFIR Engineer

We are looking for an Incident Response Engineer ( Telco) with strong hands-on experience in host-based investigations, compromise assessments, and forensic triage across diverse platforms. The ideal candidate will be capable of conducting investigations in Windows, Linux, and Unix environments, with additional exposure to container-based infrastructures.

Key Responsibilities

• Perform compromise assessments and large-scale artifact triage across Windows and Linux endpoints and servers.
• Lead and support host-based investigations , including log analysis, timeline reconstruction, and malware behavior identification.
• Utilize, customize, and optimize UAC scripts or related automated investigation tools.
• Conduct incident response activities in containerized environments such as Docker and Kubernetes , including analysis of container logs, images, and runtime behavior.
• Investig...