DFIR Associate Manager (Digital Forensics & Incident Response) (Hybrid | Cubao) ATCP-1240674-S420878

JOB TITLE: DFIR Associate Manager (Digital Forensics & Incident Response)

WORK SETUP: Hybrid in Cubao

WORK SHIFT: Shifting

Salary budget: 60K - 150K

What You'll Do:


As a DFIR Associate Manager, you'll lead and support the investigation of high-impact cybersecurity incidents while helping clients improve their cyber resilience.


 Your Key Responsibilities:

• Lead and support response efforts during critical cybersecurity incidents.

• Investigate ransomware attacks, malware infections, insider threats, data breaches, business email compromise (BEC), DDoS attacks, and advanced persistent threats (APTs).

• Conduct detailed forensic investigations to determine the scope, impact, root cause, and remediation requirements.

• Perform digital forensic analysis of endpoints, servers, cloud environments, and mobile devices.

• Work closely with security teams, business stakeholders, and management to coordinate response activities and communicate findings.

• Develop and enhance incident response playbooks, procedures, and documentation.

• Conduct proactive threat hunting and security investigations.

• Help optimize security tools and detection capabilities.

• Mentor team members and deliver knowledge-sharing sessions on incident response and forensic best practices.


What We're Looking For


 Required Experience & Skills:

• Minimum 5 years of Digital Forensics and Incident Response (DFIR) experience


Strong understanding of:

• Incident Response Lifecycle (Investigation, Containment, Eradication, Recovery)

• Digital Forensics Methodologies

• MITRE ATT&CK Framework

• Cyber Threat Investigation and Analysis

• Windows and Linux Operating Systems

• Networking and Security Fundamentals


Hands-on experience with:

• Memory, Disk, and Network Forensics

• Malware Analysis (Static and/or Dynamic)

• SIEM, Endpoint Security, Network Security, and Email Security Technologies


Experience with forensic tools such as:

• FTK

• Autopsy

• Volatility

• EnCase

• Magnet AXIOM

• SIFT

• REMnux

• Similar DFIR platforms


Nice-to-Have Skills

• Mobile Forensics (Android/iOS)

• Threat Intelligence and Threat Hunting

• Scripting and Automation using Python or PowerShell

• Industry certifications such as: GCFA, GCFE, GNFA, Other GIAC certifications


Work Setup

• Hybrid work arrangement

• Cubao office

• Amenable to possible shifting schedules


Accelerate Your Cybersecurity Career



Additional Information:

• Minimum 5 years of experience is required


RECRUITMENT PROCESS:


• Screening with CV Reviewer

• Endorse for Validation and further CV screening through Workday, along with the HRI toolkit, FCV, and CV

• For review with the client



PRE-SCREENING QUESTIONS:


1. How many years of Digital Forensics and Incident Response (DFIR) experience do you have?

2. What best describes your experience in cybersecurity incident response?

3. Rate your experience leading or supporting critical cybersecurity incident response activities from 1 to 10, 10 being the highest.

4. What is your last drawn salary?

5. How much is your salary expectation?

6. Are you amenable to working on a hybrid setup with a shifting schedule in Cubao?

7. Notice period