Dfir / Incident Response Specialist

Arobas Personnel is looking for an experienced DFIR / Incident Response Specialist for a contract opportunity with one of our clients.The specialist will support the Digital Forensics & Incident Response (DFIR) team in investigating and responding to security incidents, conducting forensic analysis, and supporting containment, eradication, and recovery activities.Key Responsibilities
Investigate and respond to security incidents
across the organization’s environmentTriage and investigate
security alerts escalated by the SOC
into confirmed incidentsPerform
digital forensic analysis
on compromised or suspicious systems, including endpoint, network, memory, and cloud environmentsEstablish
root cause, scope, and incident timelines
through forensic analysisCollect and preserve
forensic evidence
following chain‑of‑custody proceduresIdentify
Indicators of Compromise (IOCs) and adversary TTPs
and share findings with CTI and Detection Engineering teamsSupport
containment, eradication, and recovery activities
in coordination with IT and infrastructure teamsDraft
incident reports and post-incident reviews, including root cause analysis and remediation recommendationsContribute to and refine
Incident Response playbooks and runbooksCollaborate with
SOC, CTI, Detection Engineering, and Red Team
stakeholders on incident handling and lessons learnedKey Deliverables
Completed
incident investigations
with documented timelines, root cause, and impact assessmentsForensic evidence packages, including disk, memory, network, and cloud artifacts, preserved according to chain‑of‑custody standardsIOC and TTP reporting
to support CTI and Detection Engineering improvementsPost-incident reports
including remediation and lessons-learned recommendationsUpdated and refined
Incident Response playbooks and runbooksKey Expertise
Digital Forensics & Incident Response (DFIR)Security incident investigation and responseEndpoint, network, memory, and cloud forensic analysisForensic evidence collection and preservationIOC and TTP identificationIncident containment, eradication, and recoveryIncident reporting and root cause analysisId 10060Emplacement MontréalDurée De L'emploi Temps PleinNombre D'emplois Vacants 1Date Limite De DépôtDernière mise à jour: 26-11-04 15:25
#J-18808-Ljbffr