Security Engineer (DFIR Lab)

Overview:

Responsibilities:

• Maintain and manage the team’s DFIR Lab’s hardware and software systems, ensuring availability and performance for the team engagements
• Keep the team’s DFIR Lab’s asset inventory up to date and contribute to the process of license renewals, purchases and budgeting
• Deploy, configure and maintain forensic and incident response tools like EnCase, Magnet Axiom, FTK, Cellebrite, THOR, Velociraptor, KAPE, IDA Pro, etc.
• Configure and optimize forensics workstations and laptops, war laptops, servers and storage systems
• Ensure the team’s DFIR Lab adheres to security, privacy and data integrity standards
• Implement access controls, logging, audit trails and monitoring solutions to secure the lab environment
• Evaluate and contribute to the testing and recommendation of new tools and technologies to enhance the Lab’s capabilities
• Develop and maintain scripts or automation tools to streamline workflows and improve efficiency
• Contribute to process documentation and continuous service improvement activities
• Create and update SOPs for lab operations
• Document forensic processes, lab configurations and tool usage guidelines
• Collaboration with customers to deploy hardware and software for assessments and incident response engagements
• Execute lab tasks in support of cyber incident response engagements
• Proficiency with Digital Forensics & Incident Response tools (Cellebrite, THOR, Velociraptor, KAPE, IDA Pro, Security Onion, FTK Imager, Magnet Axiom, EnCase and others)