Lead Engineer - Digital Forensics & Incident Response

Investigate cyber incidents across Cloud, on-premise, and hybrid environments using Cloud-native and industry-standard forensic tools. Facilitate Incident Response calls and collaborate with internal and external stakeholders to ensure a coordinated approach. Generate investigation reports and clearly communicate findings through detailed documentation and presentations. Assist in conducting post-incident reviews to extract lessons learned and enhance workflows and controls. Develop and maintain Incident Response plans and playbooks for various cybersecurity scenarios. Document best practices and compliance measures to ensure consistency and efficiency in response actions. Serve as rotational duty officer and support emergency responses, including being on standby outside regular working hours as needed.

• Diploma or Degree in Computer Science, Cybersecurity, or a related field.
• Minimum 8 years of experience in Cloud Security Technologies and Digital Forensics & Incident Response (DFIR).
• Proficiency with Endpoint Detection and Response (EDR) tools, Network Detection and Response (NDR) tool, and Security Information and Event Management (SIEM) platforms.
• Experience in using Digital Forensic tools for evidence acquisition and analysis.
• Strong knowledge of network protocols, infrastructure setup and device communication for incident response.
• Self-motivated, with the ability to work independently and collaboratively.
• Strong problem-solving and organizational skills to manage multiple tasks efficiently.
• Excellent analytical, communication and interpersonal skills; a reliable team player.
• Relevant certifications such as Certified Cloud Security Professional (CCSP), GCIH, GCFE, GCFA, GCFR, GEIR, MCFE, EnCE (preferred but not mandatory)