Unix/Linux Infrastructure Forensics & Incident Engineer

The Role

This senior position leads complex forensic investigations and incident response across Unix/Linux servers, cloud workloads, Kubernetes environments, and enterprise applications. Day-to-day work includes forensic acquisition and analysis, timeline reconstruction, threat hunting, developing IOCs, and communicating findings to technical and executive stakeholders globally.

Skills & Experience

Candidates need 8+ years in cybersecurity with deep hands-on expertise in Linux/Unix forensic artefact analysis, SIEM and EDR platforms, cloud environments (AWS, Azure, GCP), MITRE ATT&CK mapping, and live-response techniques. Experience with rootkit analysis, container forensics, and CI/CD infrastructure investigation is highly valued.

Who It Suits

This role suits a seasoned DFIR engineer comfortable operating under pressure in large-scale enterprise environments. Those with a background in infrastructure security who can bridge deep technical investigation with clear reporting to both engineering teams and senior leadership will thrive here.