We have an urgent role for a DFIR Analyst, which is remote. Please go through the JD below:Role: DFIR AnalystDuration: Full-timeLocation: Remote (Australia)Mode of Interview: 3-4 rounds of video interviewsTravel Required: 5% TravelJOB DESCRIPTIONThe successful candidate will work closely with the Director of Global Incident Response Operations. The ideal candidate will have an energetic, can-do attitude and be comfortable working in a metrics-driven environment, delivering results and supporting team members.Essential Functions- Responsible for supporting a wide number of technologies and being able to proficiently perform advanced troubleshooting on the fly (packet captures, debugs, traffic analysis)- Work on the continued development of CIRT and Machine investigation lifecycles as part of the ongoing process to enhance IR capabilities; also provided significant contribution to the revision of Incident Response and Post-Breach Remediation policies, procedures, and processes.- Responsible for developing and documenting Incident Response methods and guidelines for the organizations- Performed live-endpoint investigation, including the identification and gathering of key forensic artifacts, offline investigation as needed,



and providing remediation actions as needed.- Implemented and deployed an Incident Response-focused ticketing system to improve incident tracking, remediation, and metrics for incidents worked.- Responsible for working with 3rd parties to assist with incident response, business email compromise, security breaches, improve overall security, investigations, recommendations, and remediation.- Developing and providing high-level technical reports in response to clients- Serve as a member of a 24x7/365 service delivery team that handles incident response, post-breach remediation, escalation, required to perform complex investigations and/or troubleshooting and driving root cause to resolution.Required Skills and Experience- Minimum 2-3 years of experience in DFIR- Experience in the deployment and management of EDR Technology- Experience with Security Technologies and the NIST Framework- Developing, documenting, and implementing incident response methods and processes- Perform live endpoint investigations- Experience in forensic investigations both on-premises and cloud- Must be available to provide coverage to meet business requirements in 3 regions- Robust knowledge of DFIR Tools- Strong knowledge of Virtualization Technologies, Operating Systems, Firewalls, VPN’s, SIEM- Enterprise Gateway Technologies, Networking Devices, Security Technologies, etc.#J-18808-Ljbffr

📌 Dfir Analyst (Newcastle)
🏢 TTC Group (Tech Talent Consulting)
📍 Newcastle