Digital Forensics and Incident Response Specialist

Roles & Responsibilities

About the role

This specialist leads the response when security incidents occur, acting as a digital detective to investigate incidents. They collect and analyse evidence from compromised systems, coordinate containment efforts, and help restore normal operations. The role involves examining digital evidence and preparing detailed incident reports for management.

Core Responsibilities:

• Coordinate all stages of incident response: detection, triage, containment, eradication, recovery, and post-incident review
• ;Conduct digital forensic investigations, including acquisition, preservation, analysis, and reporting of evidence from systems, networks, endpoints as required
• ;Develop, maintain, and execute forensic readiness and incident response plans, playbooks, procedures, and standard operating guidelines
• ;Maintain logs and case documentation in compliance with regulatory requirements; an
• dSupport threat hunting and proactive detection

.
Core Requirements

• : GIAC Certified Forensic Analyst (GCFA) or GIAC Certified Incident Handler (GCIH) or other recognised digital forensics or incident response certification
• s;A minimum of THREE (3) years of experience in cybersecurity incident response, digital forensics, or cybersecurity discipline
• s;Hands-on experience with digital forensics tool
• s;Familiarity with Windows, Linux, and cloud environment
• s;Understanding of SIEM, EDR/endpoint security tools, log aggregation, threat intelligence feed
• s;Excellent written and verbal communication skills, with ability to explain technical findings to both technical and non-technical stakeholders; a
• ndFamiliarity with incident response frameworks (NIST, SANS, ISO, MITRE ATT&CK

).
Sal

• aryCommensurate with experience and qualificati

ons
By submitting your application for this position, you consent to the collection, use, and disclosure of your personal data by RED ALPHA CYBERSECURITY for the purpose of i) employment facilitation and ii) data and statistical analysis. You may find out more information on the PDPA policies at https://www.redalphacyber.com/privacy-pol