Security Engineer (DFIR Lab)

The Security Engineer (DFIR Lab) is responsible for managing and maintaining the DFIR Lab’s infrastructure, hardware, and software. This includes deploying and configuring forensic and incident response tools, ensuring security and data integrity, and supporting cyber incident response engagements.

Responsibilities

• Manage and maintain the DFIR Lab’s hardware and software systems, ensuring availability and performance for team engagements.
• Deploy, configure, and maintain forensic and incident response tools like EnCase, Magnet Axiom, FTK, Cellebrite, THOR, Velociraptor, KAPE, IDA Pro, etc.
• Ensure the DFIR Lab adheres to security, privacy, and data integrity standards.
• Collaborate with customers to deploy hardware and software for assessments and incident response engagements.
• Develop and maintain scripts or automation tools to streamline workflows and improve efficiency.

Qualifications

• At least 5 years of hands-on experience in technical labs or DFIR roles.
• Proficiency with Digital Forensics & Incident Response tools such as Cellebrite, THOR, Velociraptor, and EnCase.
• Good experience with Linux, networking devices, and cloud-based environments.
• A bachelor’s degree in a relevant field is desirable but not mandatory.

Skills/ Certifications

• Desired certifications in at least one discipline: Incident Response, Digital Forensics, or Cloud Computing.
• Familiarity with server and desktop operating systems for Windows, Linux/Unix, and Mac.