Senior DFIR Analyst

Group IB
Colombia
Workplace: RemoteFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsSkills: ["Client-facing communication","Decision-making","Analytical depth","Report writing","Coordination"]

Lead end-to-end incident response engagements across Latin America, from initial scoping through closure and executive briefings. Serve as the primary client technical point of contact while coordinating analyst work and making decisions with incomplete data. Conduct host forensics across Windows/Active Directory, Unix/Linux, and macOS; investigate cloud and identity compromise across AWS, Azure/Entra, and GCP; perform log analysis, threat hunting, and malware triage. Deliver bilingual reports and help advance tooling and methodology.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Group IB
Group IB
1 week ago

Senior DFIR Analyst

âś“ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 19 hours agoStatus: Live

Job Summary

Lead end-to-end incident response engagements across Latin America, from initial scoping through closure and executive briefings. Serve as the primary client technical point of contact while coordinating analyst work and making decisions with incomplete data. Conduct host forensics across Windows/Active Directory, Unix/Linux, and macOS; investigate cloud and identity compromise across AWS, Azure/Entra, and GCP; perform log analysis, threat hunting, and malware triage. Deliver bilingual reports and help advance tooling and methodology.
Location: Colombia
Workplace: Remote
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Own incident response engagements from scoping through closure across endpoint, cloud, and network evidence.
  • •Coordinate client investigations as the primary technical point of contact, including collaboration with specialists across time zones.
  • •Conduct host forensics across Windows/Active Directory, Unix/Linux, and macOS environments.
  • •Investigate cloud and identity compromise across AWS, Azure/Entra, and GCP.
  • •Produce written reports and verbal briefings in Spanish and English, including QA review of colleagues’ work and output.
Travel: Medium travel

Pay and Benefits

Perks:Learning Budget

Key Requirements

  • •5+ years in DFIR within a consulting, MSSP, CERT, or in-house incident response role.
  • •Experience leading investigations end to end with direct client or stakeholder ownership.
  • •Host forensics depth across Windows and Active Directory plus working familiarity with macOS and Unix/Linux.
  • •Cloud incident response experience in at least one major platform (AWS, Azure/Entra, or GCP).
  • •Fluent Spanish and fluent English for written reports and executive briefings in both languages.
Experience:5+ yearsDFIRCybersecurityIncident responseThreat huntingMSSPCERT
Education:
Skills:Client-facing communicationDecision-makingAnalytical depthReport writingCoordination
Certifications:GCFAGCFEGNFAGREMGCIHCEHCISSPOSCP
Languages:SpanishEnglishPortuguese
Tech Stack:WindowsActive DirectoryUnix/LinuxMacOSAWSAzure/EntraGCPLog analysisThreat huntingMalware triageForensicsLLMs

Company Brief

Group IB
Provides cybersecurity solutions and services focused on threat intelligence, fraud protection, digital risk protection, and cyber investigations. Serves enterprises and public-sector organizations with tools to detect, investigate, and respond to cybercrime and online attacks.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: Singapore, Singapore
Founded: 2003
WebsiteLinkedIn