Cybersecurity Specialist (DFIR)

Tasks/Responsibilities

The DFIR Cybersecurity Specialist (Digital Forensics and Incident Response) will be responsible for cybersecurity incident response and forensic analysis for a diverse client base, within an IT team specialized in information security.

MORE PRECISELY

• Independently manage cybersecurity incident response for clients
• Assess incidents and plan their containment and eradication
• Perform forensic analysis of workstations, servers and network devices
• Analyze logs and hunt for indicators of compromise
• Coordinate the response with clients, insurers and Breach Coaches
• Write the technical reports delivered to clients
• Join a team of about 4 people
• Work in an environment based on Volatility, Wireshark and MITRE ATT&CK

PROFILE

• 3+ years of professional experience in incident response (DFIR)
• Strong command of malware analysis (static and dynamic)
• Good knowledge of TTPs (tactics, techniques and procedures)
• Expertise in Windows, Mac and Linux systems
• Experience with Azure, Amazon Web Services and Google Cloud Platform
• Comfortable with scripting (Python, C/C++) to automate analyses
• Knowledge of reverse engineering (asset)
• GCFA (GIAC Certified Forensic Analyst) certification or equivalent (asset)
• Availability on short notice and outside business hours
• Excellent ability to explain technical issues to senior management
• Bachelor’s degree in computer science or equivalent
• Bilingualism required (French and English)