Forensic Focus is seeking a senior SOC/DFIR skilled to own the most complex multi-host intrusion cases from triage through forensic timelining, root cause analysis and remediation. The role spans endpoint, identity, and SIEM data and shapes detection improvements while guiding the team.
The ideal candidate has 6+ years in SOC, incident response, DFIR or MDR, with deep MITRE ATT&CK; knowledge, cross-platform forensics, malware analysis capabilities, and strong Microsoft 365 cloud identity