Staff Engineer, Digital Forensics & Incident Response

Lead end-to-end digital forensics & incident response investigations, including triage, containment, and recovery.

Perform advanced forensic analysis of endpoints, networks, cloud, and containerized environments to reconstruct intrusion chains and identify compromises.

Develop incident response playbooks, mentor analysts, and collaborate cross-functionally to convert findings into security improvements.

10-12 years of cybersecurity experience with significant focus on Digital Forensics and Incident Response.

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems or equivalent practical experience.

Expertise with forensic tools (EnCase, FTK, Magnet AXIOM, Volatility), scripting (Python, PowerShell), and incident response in telecom and cloud/Kubernetes environments.

Strong knowledge of telecommunications protocols (4G/5G, SS7, Diameter, GTP), MITRE ATT&CK framework, and producing court-admissible forensic reports.

Extensive experience investigating security incidents within telecommunications and cloud-native container orchestration environments such as Kubernetes.

Ability to operate under high-pressure, time-sensitive situations, producing high-quality forensic documentation and reports for technical and executive audiences.

Strategic thinker with a forensic mindset capable of automating processes and leveraging AI/ML tools to enhance incident response efficacy.