Overview

Incident Response Digital Forensics Consultant
 
Location: Dublin 
Duration: 6+ months contract 

Non-negotiables experience:

  • Strong hands on technical experience in DFIR investigations involving real world security incidents like ransomware, business email compromise, account takeovers, endpoint and server compromises, and other complex enterprise intrusions.
  • Practical experience conducting end to end investigationse. identifying initial access vectors, analysing attacker activity, tracing lateral movement, establishing the scope and impact of a compromise, and supporting containment, eradication and recovery activities.
  • Windows forensic investigation experience, including analysis of forensic artefacts & evidence of attacker activity.
  • Experience analysing and correlating logs from various sources, e.g. event Logs, IIS, WAF, firewall, web server and other security logs.
  • Experience investigating incidents within Microsoft 365 and AWS environments 
  • Hands on experience working with EDR tools such as Microsoft Defender for Endpoint, CrowdStrike or SentinelOne.
  • Ability to independently investigate incidents, identify the scope of compromise and provide technical findings and remediation
  • Comfortable working in a customer facing environment and able to hit the ground running straight away

 
Nice to haves:

  • Forensic tool experience and/or certifications, particularly FTK and EnCase.
  • SANS/GIAC incident response or forensic certifications e.g. GCIH, GCFA, GCFE
  • Full driving licence & access to a car for potential on-site engagements.

 
You must be technically very strong and genuinely experienced in hands-on enterprise security environments.
 
REF: EBT8399

Candidates must be eligible to work full time and long term in the location specified or currently hold a valid appropriate long term work Visa to apply.
  
eir business talent, eir business and our clients are equal opportunity employers who seeks to recruit and appoint the best available person for a job regardless of marital / civil partnership status, sex (including pregnancy), age, religion, belief, race, nationality and ethnic or national origin, colour, sexual orientation or disability. eir business talent, eir business and our clients apply all relevant Data Protection laws when processing your Personal Data.
  
If you choose to apply to this opportunity and share your CV or other personal information with eir business talent, eir business and our clients, these details will be held by us in accordance with our privacy policy used by our recruitment team to contact you regarding this or other relevant opportunities at eir business talent and eir business.