Job Summary

We are looking for an experienced DFIR professional with solid hands-on expertise in digital forensics, incident response, and malware investigation. The candidate will lead forensic investigations, support customer engagements, and help establish DFIR processes and capabilities.

Key Responsibilities

- Conduct Windows and Linux forensic investigations, including disk and memory forensics.
- Investigate ransomware, malware infections, data breaches, and security incidents.
- Perform evidence acquisition, preservation, timeline analysis, and root cause analysis.
- Conduct malware analysis and threat hunting.
- Prepare detailed investigation reports and maintain chain-of-custody documentation.
- Develop DFIR SOPs, playbooks, and investigation procedures.
- Support customer engagements and mentor junior team members.





Required Skills

- 6-7+ years of hands-on DFIR experience.
- Strong knowledge of Windows/Linux forensics and memory analysis.
- Experience with incident response, malware analysis, and log analysis.
- Hands-on experience with tools such as Volatility, KAPE, FTK Imager, Autopsy, and Binalyze AIR.
- Knowledge of MITRE ATTCK and incident response methodologies.

Preferred Certifications

- GIAC Certified Forensic Analyst (GCFA)
- EC-Council Certified Hacking Forensic Investigator (CHFI)
- GIAC Certified Incident Handler (GCIH)

Education: Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field.

📌 Manager - Cybersecurity Operations (Pune)
🏢 Tata Communications
📍 Pune