Position: Lead Incident Responder & Digital Forensics Specialist
Category: Security
English level: intermediate
Years of experience: 4


• Building security infrastructure designs and planning new infrastructure security requirements.
• Source code security reviews for various languages.
• Vulnerability Management: Identifying, assessing, and prioritizing vulnerabilities within systems and
applications, and coordinating remediation efforts.
• Implementing SIEM solutions (Splunk & ELK) to enable centralized log management, event correlation, and
real-time threat detection.
• Building threat scenarios and developing SIEM rules based on the MITRE ATT&CK Framework to enhance
detection and response capabilities.
• Implementing EDR (Endpoint Detection and Response) and NDR (Network Detection and Response) solutions
for proactive threat hunting and incident investigation.
• Implementation of PAM (Privileged Access Management) solutions to enforce strict access controls and
mitigate insider threats.
• Assisting in DevSecOps tasks, such as container security, system hardening, third-party analysis, baselining,
and CI/CD (Continuous Integration/Continuous Deployment) pipeline security.
• Conducting web penetration testing to assess the security posture of web applications, identify
vulnerabilities, and provide recommendations for remediation.
• Conducting pentest processes to assess the overall security of systems, networks, and applications, and
identifying potential vulnerabilities and weaknesses.
• Conducting digital forensics investigations to identify the source, extent, and impact of security incidents,
preserving evidence, and providing recommendations for remediation.
• Performing source code security reviews for various programming languages to identify and address
potential vulnerabilities, ensuring secure coding practices.
• Developing and implementing Threat Detection Engineering methodologies and techniques to proactively
identify and respond to advanced cyber threats.
• Collaborating with cross-functional teams to develop and maintain incident response plans, conducting
tabletop exercises, and participating in incident response activities when required.
• Staying up-to-date with emerging security trends, tools, and techniques through continuous learning and
professional development.
Looking for new experience