Cyber Security Engineer (DFIR)

Position Summary

The DFIR Engineer will focus on cyber security anomaly hunting, digital forensics and incident response (DFIR), leveraging his/her security knowledge and experience in using a broad array of tools and techniques to detect and respond to malicious activities.

The incumbent must be familiar with the Cyber Security Act 2018, Cybersecurity Code of Practice (CCoP), MAS Cyber Hygiene and Technology Risk Management Guidelines (TRMG).

Key Responsibilities

• Develop strategies through research, evaluating intelligence, studying patterns and trends.
• Conduct hunting for threats and enacting identification, containment and eradication measures while supporting recovery efforts.
• Conduct research and stay up to date on latest methods, tools, and trends in digital forensics analysis.
• Receive tier 2/3 incident escalation from detection operations and assist with real-time, continuous (24x7) security event monitoring, response, and reporting.
• Conduct forensic investigations, collect, preserve, and analyze data and digital evidence.
• Perform forensic examinations on electronic devices, including laptop and desktop computers, servers, and mobile devices; preserve and analyse data obtained from examinations.
• Prepare and present regular reports.
• Conduct vulnerability assessments, analyse scan results, and identify security weakness in systems and applications. This includes collaborating with IT teams to prioritise and remediate identified vulnerabilities, track remediation progress, and ensure systems are patched and updated to mitigate potential security risks.
• Prepare detailed reports documenting findings from digital forensic investigations and incident response activities, including technical analysis, root cause analysis, and remediation recommendations.
• Collaborate with cross-functional teams, including IT Security, Legal, Risk & Compliance, Audit, Human Capital Management, to support investigations and ensure alignment with organizational goals and objectives.
• Conduct sharing sessions and exercises with team members.