Position Overview

As a DFIR Associate Manager, you will play a critical role in responding to, investigating, and mitigating cybersecurity incidents. Your work will involve conducting digital forensics investigations, uncovering root causes, preserving evidence, and strengthening our clients’ security posture against future threats.

Responsibilities

• Provide expert guidance to Security Operations Center teams during critical incidents, supporting effective response and recovery.
• Respond to and investigate cybersecurity incidents including ransomware, malware outbreaks, APTs, insider threats, BEC, DDoS, and data breaches.
• Conduct in‑depth incident investigations, identifying scope, impact, root cause, and recommending remediation actions.
• Perform digital forensics examinations across endpoints, servers, mobile devices, and cloud environments.
• Collaborate with cross‑functional teams—security, legal, management—to coor...