DFIR Manager – Dubai/Abu Dhabi – Consulting
We are looking for a Digital and Cyber Forensic Manager to join our client. In this role, you will play a critical part in assisting with data analytics, computer forensics, and e-Discovery projects. Your responsibilities will encompass the entire lifecycle of these projects, from data identification and collection to analysis and reporting. You will work closely with clients, developing project plans, conducting thorough investigations, and translating complex technical findings into clear and concise reports.
Key Responsibilities:
- Stay abreast of industry trends: Keep up-to-date on the latest advancements in digital forensics, emerging cyber threats, new technologies, legal requirements, and the evolving forensic technology marketplace.
- Conduct in-depth cyber forensic investigations: Investigate cybercrime incidents such as network intrusions, data breaches, and fraud.
- Proficient in identifying indicators of compromise (IOCs): Identify malicious files, registry entries, network connections, and other suspicious activities.
- Manage multiple projects: Effectively manage and oversee multiple projects across a diverse portfolio of clients in the Middle East.
- Build strong client relationships: Cultivate and strengthen client relationships through a consultative approach, providing expert guidance and support.
- Develop and manage project plans: Create comprehensive project plans, including consultations on processes and tools to achieve project objectives.
- Communicate effectively: Translate complex technical information into easily understandable terms for clients.
- Ensure compliance: Adhere to the firm's risk management policies and procedures.
- Collect, preserve, and analyze digital evidence: Gather and analyze digital evidence from various sources, including computers, mobile devices, servers, and network logs.
- Leverage forensic tools: Utilize a wide range of forensic tools and techniques, such as Encase, FTK, Axiom, Cellebrite, and others, for data collection, processing, and analysis.
- Provide data-driven insights: Analyze data and provide meaningful insights, interpretations, and guidance to clients using data intelligence and data mining solutions.
- Identify and respond to threats: Utilize forensic tools and techniques to identify, recover, and analyze evidence of unauthorized access, malware, infections, data exfiltration, and other malicious activities.
- Document and report findings: Document findings thoroughly, prepare detailed forensic reports, and present findings to management and other stakeholders.
- Develop and maintain best practices: Develop and maintain best practices for forensic investigations to enhance incident response capabilities.
Required Skills:
Proficiency in forensic software: Expertise in Encase, FTK, Intella, Cellebrite, and Relativity is essential.
Experience with cloud platforms: Proficiency in Google Vault and O365 administrative consoles is preferred.
Knowledge of network security tools: Familiarity with Wireshark, Network miner, Kali Linux, and the Volatility framework is preferred.
Qualifications and Experience:
Bachelor's degree in computer science or a related field.
6-8 years of professional experience, with at least 5 years in digital and cyber forensics or incident response.
Two or more relevant industry certifications (e.g., EnCE, CCE, ACE, GCFE, CCE, CCPA, CEH, CHFI) are strongly preferred.
