DFIR Analyst / Specialist

📍

Location

Bangalore / Hyderabad

💼

Experience

6+ Years

📄

Employment Type

Contract

About the Role

We are looking for a skilled

DFIR (Digital Forensics, Incident Response & Threat Hunting) Analyst / Specialist

to join our cybersecurity team. This role is ideal for professionals with hands-on experience in investigating security incidents, conducting threat hunting, performing digital forensic investigations, and strengthening enterprise security through proactive detection and response.

If you're passionate about cybersecurity investigations and enjoy working with modern security technologies to identify, analyze, and mitigate cyber threats, we'd love to hear from you.

Key Responsibilities

• Investigate, analyze, and respond to cybersecurity incidents across enterprise environments.
• Perform threat hunting activities using SIEM, EDR, and other security telemetry.
• Conduct host-based forensic investigations, including memory, disk, and log analysis.
• Review, validate, and investigate Data Loss Prevention (DLP) alerts across endpoints, email, and web channels.
• Analyze security events, correlate logs, and document investigation findings.
• Assist in containment, remediation, and post-incident analysis.
• Support the development and tuning of detection rules to improve security monitoring.
• Contribute to insider threat investigations through user activity analysis.
• Work closely with SOC, IT, and cross-functional teams during incident response activities.
• Maintain clear documentation, investigation reports, and case records.
• Support continuous improvement of security controls and incident response processes.

Required Skills

• Hands-on experience in Incident Response and Threat Hunting
• Strong understanding of Digital Forensics methodologies
• Experience working with SIEM and EDR platforms
• Knowledge of DLP technologies and incident investigation
• Expertise in log analysis and security event correlation
• Familiarity with Windows security and enterprise environments
• Understanding of malware behavior and attack techniques
• Strong analytical, troubleshooting, and documentation skills
• Excellent communication and collaboration abilities

Preferred Qualifications

• Around

6 years of experience

in Cybersecurity, with exposure to Incident Response, Threat Hunting, SOC Operations, Digital Forensics, or DLP.

• Hands-on experience with enterprise security tools such as SIEM, EDR, DLP, or forensic platforms.
• Experience performing host-based forensic investigations and security event analysis.
• Familiarity with the MITRE ATT&CK framework and cyber threat intelligence is an added advantage.

Preferred Certifications (Optional)

• CEH
• CHFI
• CompTIA Security+
• GCIH
• Equivalent cybersecurity certifications

Relevant hands-on experience will be considered in place of certifications.

If you're looking for an opportunity to work on real-world cyber investigations and help strengthen enterprise security, we'd love to hear from you.