DFIR Specialist
Elbit Systems Israel
Haifa District
The Role
This position sits within a cybersecurity team focused on defending a defence organisation against real-world threats. Day to day, the specialist investigates security incidents, performs memory and host-based forensic analysis, conducts threat hunting across internal and external sources, and develops incident response playbooks and remediation strategies, including participation in an on-call rotation roughly every four weeks.
Skills & Experience
A minimum of four years in incident response, digital forensics, threat hunting, and security monitoring is required, alongside strong network traffic analysis skills and experience in large enterprise environments. Cloud security knowledge across AWS and Azure is expected, with AWS Security Specialty and Azure Security Engineer Associate certifications considered advantageous.
Who It Suits
This role suits an experienced DFIR professional who thrives in complex, high-stakes environments and can lead cross-functional response efforts under pressure. Someone comfortable communicating technical findings clearly to varied audiences, keen to stay ahead of evolving attacker tactics, and motivated by work that carries tangible operational significance will find this position particularly rewarding.
