Senior DFIR Analyst

Group IB
Mexico
Workplace: RemoteFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsSkills: ["Client-facing leadership","Incident response decision-making","Analytical thinking","Clear technical communication","Collaboration"]

Lead end-to-end incident response engagements across Latin America, owning engagements from initial scoping through closure and executive briefing. Serve as the primary technical point of contact while coordinating analysts and making decisions under time pressure. Perform host, cloud, and identity forensics across Windows/Active Directory, Unix/Linux, macOS, and AWS, Azure/Entra, and GCP. Produce Spanish and English reports, review colleague output, and build scripts, tooling, and methodologies to accelerate investigations.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Group IB
Group IB
1 week ago

Senior DFIR Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 19 hours agoStatus: Live

Job Summary

Lead end-to-end incident response engagements across Latin America, owning engagements from initial scoping through closure and executive briefing. Serve as the primary technical point of contact while coordinating analysts and making decisions under time pressure. Perform host, cloud, and identity forensics across Windows/Active Directory, Unix/Linux, macOS, and AWS, Azure/Entra, and GCP. Produce Spanish and English reports, review colleague output, and build scripts, tooling, and methodologies to accelerate investigations.
Location: Mexico
Workplace: Remote
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Own incident response engagements across Latin America from scoping through closure, including executive briefings.
  • •Lead client-facing technical work as the primary technical point of contact and coordinate analysts on cases.
  • •Conduct host forensics across Windows/Active Directory and Unix/Linux/macOS environments.
  • •Investigate cloud and identity compromise across AWS, Azure/Entra, and GCP.
  • •Deliver written reports and verbal briefings in Spanish and English, support QA of team output, and build scripts/tooling and investigative methodology.
Travel: Medium travel

Pay and Benefits

Perks:Learning Budget

Key Requirements

  • •5+ years of DFIR experience in consulting, MSSP, CERT, or an in-house incident response role.
  • •Demonstrated experience leading investigations end to end with direct client or stakeholder ownership.
  • •Strong host forensics across Windows and Active Directory and working familiarity with Unix/Linux and macOS.
  • •Cloud incident response experience with at least one platform: AWS, Azure/Entra, or GCP.
  • •Fluent Spanish and fluent English for writing reports and briefing executives; travel readiness for onsite client work (~25%).
Experience:5+ yearsDFIRIncident responseConsultingMSSPCERTCloud security
Skills:Client-facing leadershipIncident response decision-makingAnalytical thinkingClear technical communicationCollaboration
Certifications:GCFAGCFEGNFAGREMGCIHCEHCISSPOSCP
Languages:SpanishEnglishPortuguese
Tech Stack:WindowsActive DirectoryUnix/LinuxMacOSAWSAzureEntraGCPEndpoint evidenceCloud evidenceNetwork evidenceLog analysisThreat huntingMalware triageMalware analysisScriptsToolingLLMs

Company Brief

Group IB
Provides cybersecurity solutions and services focused on threat intelligence, fraud protection, digital risk protection, and cyber investigations. Serves enterprises and public-sector organizations with tools to detect, investigate, and respond to cybercrime and online attacks.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: Singapore, Singapore
Founded: 2003
WebsiteLinkedIn