Lead – Digital Forensics & Incident Response (DFIR)

We are looking for a hands-on DFIR professional with strong experience investigating complex cybersecurity incidents and performing digital forensic analysis.Key expertise required:5+ years in DFIR / Incident Response / Cyber InvestigationsEnd-to-end handling of ransomware, malware, unauthorized access, insider threats & data breachesHands-on Windows & Linux forensicsDisk, memory & endpoint forensic analysisForensic acquisition, evidence preservation & chain of custodyStrong SIEM + EDR/XDR investigation experienceTools such as EnCase, FTK, Velociraptor, Volatility, KAPE, Autopsy, WiresharkIncident timeline reconstruction, Root Cause Analysis (RCA) & forensic reportingCloud investigations across M365 / Azure / AWS / GCP preferredExposure to PowerShell, Python, KQL, SPL or BashPreferred Certifications: GCFA, GCIH, GCIA, CHFI, EnCE, CFCE, CISSP, CISM, SC-200 or equivalent.This is not a pure SOC monitoring role. Strong hands-on Digital Forensics & Incident Response experience is essential.Interested candidates can share their updated CV for a confidential discussion.