Senior Security Engineer - Digital Forensics and Incident Response (DFIR)

What you'll do

• Respond to escalated security events, provide on-call support for critical issues, and manage incident communications.
• Lead forensic investigations to determine incident root cause, scope, and impact; develop and improve response plans and playbooks.
• Investigate AI- and agentic-platform incidents, use AI tools to support security operations, and train or mentor incident responders and organizational partners.

What they ask for

• 3-5 years of experience in a dedicated cybersecurity role, with emphasis on digital forensics and incident response.
• 1-3 years writing scripts or code, such as Bash, PowerShell, or Python.
• Experience with detection engineering and threat hunting; familiarity with EDR or CSPM tools, SIEM solutions, and public cloud services.
• Knowledge of AI/LLM security risks and mitigations, cybersecurity and cloud fundamentals, and digital forensics and incident response processes.

Nice to have

• Bachelor's degree or higher in Technology, Computer Science, Cybersecurity, or a related field, or equivalent hands-on experience, is preferred.
• Industry-recognized certifications such as AWS Security Specialty, GCIH, GCFA, GFCE, CISSP, or emerging AI security credentials.

Tools

Bash, PowerShell, Python, CrowdStrike Falcon, Wiz, Splunk, LogScale, AWS

AI focus

Respond to incidents involving AI/LLM tools and agentic platforms; extend playbooks for generative AI and AI SOC risks; use AI SOC platforms and frontier AI tools for triage, detection tuning, investigations, and documentation.