(ACTIVE) DFIR Associate Manager (Digital Forensics & Incident Response) (Hybrid | Cubao)

Gratitude Inc

6 Views

14 hours ago

(ACTIVE) DFIR Associate Manager (Digital Forensics & Incident Response) (Hybrid | Cubao)

5-10 Year(s)

Manila (Cubao Quezon City)

Quick Apply Apply

Job Description

Key Skills

Network Security Python Cyber Security Powershell SIEM tools Windows Server Endpoint security Security incident response digital forensics

0 candidate(s) have already applied for this Job. Apply now

DFIR Associate Manager – Digital Forensics & Incident Response

Location: Cubao, Quezon City, Philippines
Work Setup: Hybrid
Work Shift: Shifting
Salary: Confidential – To be discussed during the Job Offer

Job Summary

We are seeking a DFIR Associate Manager to lead and support high-impact cybersecurity incident investigations and help strengthen clients' cyber resilience. The role involves digital forensics, incident response, threat hunting, malware investigation, and collaboration with security and business stakeholders.

Key Responsibilities

Lead and support response activities during critical cybersecurity incidents.
Investigate ransomware, malware infections, insider threats, data breaches, BEC, DDoS attacks, and APTs.
Conduct forensic investigations to determine incident scope, impact, root cause, and remediation requirements.
Perform digital forensic analysis across endpoints, servers, cloud environments, and mobile devices.
Collaborate with security teams, business stakeholders, and management to coordinate response activities.
Communicate investigation findings and provide actionable recommendations.
Develop and improve incident response playbooks, procedures, and documentation.
Conduct proactive threat hunting and security investigations.
Help optimize security tools and detection capabilities.
Mentor team members and conduct knowledge-sharing sessions on DFIR best practices.

Required Qualifications & Skills

Minimum 5 years of Digital Forensics and Incident Response (DFIR) experience.
Strong understanding of:
- Incident Response Lifecycle
- Digital Forensics Methodologies
- MITRE ATT&CK Framework
- Cyber Threat Investigation and Analysis
- Windows and Linux Operating Systems
- Networking and Security Fundamentals
Hands-on experience with:
- Memory, Disk, and Network Forensics
- Malware Analysis
- SIEM, Endpoint Security, Network Security, and Email Security technologies
Experience with DFIR tools such as FTK, Autopsy, Volatility, EnCase, Magnet AXIOM, SIFT, and REMnux or similar platforms.

Nice-to-Have Skills

Mobile Forensics – Android/iOS.
Threat Intelligence and Threat Hunting.
Python or PowerShell scripting and automation.
Industry certifications such as GCFA, GCFE, GNFA, or other GIAC certifications.

Work Requirements

Hybrid work arrangement with an office location in Cubao, Quezon City.
Must be amenable to a shifting schedule.
Applicants must currently be in the Philippines and have the legal right to live and work in the country.
Must not be a current or former employee of the hiring organization.

Learning & Development

The role provides opportunities for continuous learning, advanced cybersecurity certifications, and upskilling in areas including:

OSCP, OSDA
CDSA, CPTS
GCFA, GCFE, GMON, GCIH, GREM
CRTO, CRTL

Certification sponsorship and upskilling opportunities may be available to support professional development.

Recruitment Process

CV Screening
Validation and further CV screening
Client Review

Pre-Screening Questions

How many years of Digital Forensics and Incident Response (DFIR) experience do you have?
What best describes your experience in cybersecurity incident response?
On a scale of 1–10, how would you rate your experience leading or supporting critical cybersecurity incident response activities?
What was your last drawn salary?
What is your salary expectation?
Are you amenable to a hybrid setup with a shifting schedule in Cubao?
What is your notice period?

Role

Security

Timings

Rotational Shifts (Permanent)

Industry

IT-Software / Software Services

Work Mode

Hybrid

Process

Non-Voice

Functional Area

IT Software/Hardware

Note: Myglit doesn't charge any money from candidates. If you have been asked to pay money to get this job then report to us immediately at support@myglit.com.