Job Description
We are seeking a Cybersecurity Incident Response & DFIR Expert. In this role, you will be fully responsible for internalizing and leading high-severity incident response and digital forensics capabilities tailored to the Americas time zone.
The position combines rigorous, hands-on technical operations to mitigate critical threats (reactive phase) with designing cyber drills, implementing automations, and hardening response playbooks (proactive phase).
Key Responsibilities
-
Incident Response (IR): Coordinate and lead the containment of critical cyber incidents (Ransomware, advanced intrusions), orchestrating technical teams and assigning tasks under high-pressure scenarios.
-
Digital Forensics (DF): Investigate the root cause, initial access vector, and scope of attacks through deep-dive analysis of logs, system memory, networks, and endpoints.
-
Threat Intelligence & Reporting: Author comprehensive technical digital forensics reports, document lessons learned, and generate Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs).
-
Organizational Resilience: Design and execute cyber attack simulations (cyber drills) and develop technical incident response playbooks.
-
Strategic Communication: Translate complex technical findings into executive-level language to deliver clear briefings to crisis committees and senior leadership (C-Level).
Profile Requirements
-
Education: Bachelor’s degree in Systems Engineering, Cybersecurity, Computer Science, or a related field.
-
Experience: Solid and proven track record in Blue Team, CSIRT, SOC Level 3 positions, or senior consulting roles specializing in DFIR.
-
Languages: Full professional fluency in English (both written and spoken) is an absolute requirement for global reporting and alignment.