PURPOSE

• Subject Matter Expert on Digital Forensics within Group Information Security
• Conduct Digital Forensics during incident response for FWD
• Act as team lead for local GIS CFC contractors in VTC
• Support Incident Response and Threat Hunting BAU functions especially when TIM is unavailable
• Improve resiliency and reduce concentration risk in support of core GIS CFC functions in TIM

• Digital Forensics Standards, Policies and Processes
• Digital Forensics tooling
• Digital Forensics activity
• Digital Forensics reporting
• VTC team leadership
• GIS CFC IR BAU
• GIS CFC Threat Hunting support

• Bachelor’s or Master’s degree in Computer Forensics, Digital Forensics, Cybersecurity or a related field
• At least 5 years experience in digital forensics, incident response or related fields
• Digital forensics certifications such as CFCE, CHFI or GCFA
• Experience in e Discovery and legal handling of forensics cases
• Experience in cybersecurity law enforcement on forensics side

• Proficiency in forensics tools such as En Case, FTK, Auopsy, Cellebrite etc.
• Proficiency in Windows, Linux, mac OS as well as Windows Active Directory and related technologies
• Proficiency in investigating compromise of enterprise networks
• Proficiency in EDR tools such as Defender, Crowdstrike etc.
• Proficiency in Cyber Incident Response
• Log file analysis
• Knowledge of anti-forensics techniques
• Knowledge of legal standards of evidence preservation and chain of custody
• Knowledge of detecting anomalous activity in SIEM and other log sources to identify threats
• Experience leading a small team of security analysts
• Good English communication and presentation skills