Senior Digital Forensics Consultant

Location: Bangalore, India (Onsite)

Employment Type: Full-Time

Overall Experience: 5+ Years in Cybersecurity

Forensics Experience: Minimum 3 Years in Digital Forensics

Role Overview

We are looking for a seasoned digital forensics professional with deep, hands-on experience in forensic investigation, incident analysis, and evidence handling. This person will function as a strong individual contributor, owning investigations end-to-end

Required Skills & Technical Expertise

Mandatory SIEM & EDR

- Hands-on proficiency with one or more SIEM platforms: QRadar, Splunk, Microsoft Sentinel, or ArcSight
- Hands-on proficiency with one or more EDR/XDR platforms: Cortex XDR, Microsoft Defender for Endpoint, CrowdStrike Falcon, or equivalent
- Ability to write and tune detection queries, hunt across telemetry, and extract forensic value from platform data

Forensic Tools

- Proficiency with industry-standard forensic tooling: EnCase, FTK, or Autopsy
- Experience with memory forensics using Volatility or equivalent
- Familiarity with Magnet AXIOM is an advantage





Technical Fundamentals

- Deep understanding of Windows internals (registry, event logs, artefact locations, NTFS) and Linux forensics
- Experience identifying persistence mechanisms, lateral movement techniques, and command-and-control activity
- Working knowledge of the MITRE ATT&CK; framework and adversary TTP mapping
- Ability to perform network forensics: packet analysis, flow data, proxy and firewall log review

Communication

- Strong technical writing skills — capable of producing structured, defensible reports with minimal review
- Comfortable presenting findings to both technical teams and management audiences

Positive to Have

- Cloud forensics experience across AWS, Azure, or GCP environments (logs, storage, identity artefacts)
- Exposure to digital forensics in regulated industries (BFSI, healthcare, critical infrastructure)
- Familiarity with scripting (Python, PowerShell) to automate forensic data collection or parsing

📌 Openings For Senior Digital Forensics Consultant_WFO (Bengaluru)
🏢 Ampcus Cyber
📍 Bengaluru