Senior DFIR Analyst

Group IB
Peru
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsSkills: ["Client-facing communication","Investigation leadership","Decision-making","Collaboration","Research contribution"]

Lead end-to-end incident response engagements across Latin America, owning scoping through executive closure. Serve as the primary technical point of contact while coordinating analysts and making sound decisions with incomplete data. Perform host forensics across Windows/Active Directory, Unix/Linux, and macOS, plus cloud and identity investigations on AWS, Azure/Entra, and GCP. Deliver Spanish/English reports and briefings, build scripts and tooling, and contribute to research and public speaking.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Group IB
Group IB
1 week ago

Senior DFIR Analyst

âś“ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Lead end-to-end incident response engagements across Latin America, owning scoping through executive closure. Serve as the primary technical point of contact while coordinating analysts and making sound decisions with incomplete data. Perform host forensics across Windows/Active Directory, Unix/Linux, and macOS, plus cloud and identity investigations on AWS, Azure/Entra, and GCP. Deliver Spanish/English reports and briefings, build scripts and tooling, and contribute to research and public speaking.
Location: Peru
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Own incident response engagements from scoping through closure across endpoint, cloud, and network evidence.
  • •Act as primary technical point of contact and coordinate analysts for each case.
  • •Conduct host forensics across Windows/Active Directory, Unix/Linux, and macOS environments.
  • •Investigate cloud and identity compromise across AWS, Azure/Entra, and GCP.
  • •Produce reports and briefings in Spanish and English, and support QA by reviewing colleagues’ work.
Travel: Medium travel

Key Requirements

  • •5+ years in DFIR within consulting, MSSP, CERT, or an in-house incident response role.
  • •Demonstrated experience leading incident response investigations end to end with direct client or stakeholder ownership.
  • •Depth in host forensics across Windows and Active Directory plus working familiarity of Unix/Linux and macOS.
  • •Cloud incident response experience on at least one platform (AWS, Azure/Entra, or GCP).
  • •Fluency in Spanish and English for written reports and executive briefings.
Experience:5+ yearsDFIRIncident responseCybersecurityConsultingMSSPCERT
Education:
Skills:Client-facing communicationInvestigation leadershipDecision-makingCollaborationResearch contribution
Certifications:GCFAGCFEGNFAGREMGCIHCloud platform certificationsCEHCISSPOSCP
Languages:SpanishEnglishPortuguese
Tech Stack:DFIRWindowsActive DirectoryUnix/LinuxMacOSAWSAzure/EntraGCPLog analysisThreat huntingMalware triageMalware analysisLLMs

Company Brief

Group IB
Provides cybersecurity solutions and services focused on threat intelligence, fraud protection, digital risk protection, and cyber investigations. Serves enterprises and public-sector organizations with tools to detect, investigate, and respond to cybercrime and online attacks.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: Singapore, Singapore
Founded: 2003
WebsiteLinkedIn