DFIR Specialist

Support digital forensics and incident response engagements by assisting with incident triage, investigation, containment, recovery, and reporting. Collect, preserve, and analyze digital evidence from endpoints, networks, logs, and cloud environments, and evaluate forensic artifacts and IOCs to assess impact. Contribute to threat hunting to identify suspicious behavior and document findings, incident timelines, and remediation recommendations, while helping maintain DFIR tools and scripts.