DFIR Analyst | Cyber Security Investigations | Cloud

The Role

The analyst conducts in-depth digital forensic investigations across endpoints, servers, mobile devices, network logs and cloud environments. Day-to-day responsibilities include executing containment and recovery strategies, correlating security logs from EDR, network and cloud sources, and contributing to SOAR playbook automation and post-incident reporting.

Skills & Experience

At least four years of hands-on DFIR experience is required, along with proficiency in SQL and Python. Familiarity with EDR telemetry, cloud audit trails and enterprise security operations is expected, and practical exposure to cloud platforms is strongly preferred.

Who It Suits

This role suits an experienced DFIR practitioner ready to work within a well-resourced enterprise security function. Candidates who combine solid forensic investigation skills with scripting ability and a growing cloud background will thrive in this headquarters-based position in Singapore.