Digital Forensic Examiner  

Core Responsibilities

• To accomplish all assigned tasks by the management in a timely and effective manner as deemed necessary for the betterment of the organization as a whole.

Incident Forensics

• To be responsible for all phases of the forensic examination of digital media, including on-site and off-site evidence acquisition or seizures, forensic analysis, and reporting, while maintaining chain of custody and following rules of evidence.
• To evaluate emerging forensic technologies.
• To coordinate with clients, other domain specialists, internal & external SMEs, and other related departments or units in gathering pieces of evidence and information relating to an incident.
• To participate in creating a customized, environment-appropriate mitigation plan.
• To create forensic reports and other crucial communications to be reviewed by the acting head/superior.
• To actively create thorough documentation on each investigated incident providing insights and lessons learned.
• To continue learning and expand knowledge and expertise in the field.

Process Engineering

• To proactively contribute to the establishment of the most effective and efficient processes.
• To promote and uphold compliance to agreed standards and processes.

Continuous Improvement

• To collaborate with the team leader and other members in improving workflows, documentation, standards, and processes.

Information Management

• To promote and contribute to Forensics and Incident Response Security Team's information and knowledge repository.

Education

• Must be a graduate of Computer Studies/Computer Engineering/Information Technology/Electronics Engineering or equivalent

Experience

• Having at least 2 years of working experience in the cybersecurity space

Technical Skills

(N) ITIL
(N) Networking Fundamentals
(N) Operating System Fundamentals
(N) Application/Web Programming
(N) Cybersecurity Fundamentals
(N) Secure Network Architecture
(N) Perimeter Defense Technologies
(N) Open-Source Intelligence
(N) Incident Management and Response
(F) Vulnerability Scanning & Ethical Hacking
(F) Reverse Engineering
(F) Malware Analysis
(F) Digital Forensics Methodologies
(F)Digital Forensics Tools

(F) - Familiar / 0-12 months
(N) - Novice / 1-2 years
(I) - Intermediate / 3-4 years
(A) - Advanced / > 5 years

Communication Skills

(N) Speaks clearly and can be easily understood.
(N) Expresses & speaks ideas in a logical and organized sequence.
(I) Writes concisely and effectively.
(I) Expresses ideas in a logical and organized sequence in written form.

(F) - Familiar / 0-12 months
(N) - Novice / 1-2 years
(I) - Intermediate / 3-4 years
(A) - Advanced / > 5 years

Abilities

• Must work well under pressure.
• Must have the ability to communicate complex issues clearly in a concise and organized manner, both verbally and non-verbally, with strong grammar skills.
• Must be proactive when identifying potential issues.
• Must show willingness to collaborate and participate in team investigations and has the ability to work semi-independently with oversight and direction.
• Able to produce timely, logical, and concise analytic reports, documents, assessments, studies, and briefing materials in formats including Microsoft Office tools (e.g. Excel, Word, PowerPoint, etc.), electronic/soft copy matrices, and/or web-enabled formats.
• Able to effectively assess tasks & risks to prioritize work.
• Able to demonstrate understanding of interpreting analysis to include, but not limited to, its meaning, importance, and implications.
• Able to develop structured research including, but not limited to, obtaining, evaluating, organizing, and maintaining information within security and data protocols

Trainings & Certifications Requirement

(O) ITIL Foundation
(O) CompTIA Network+/Cisco Certified Network Associate (CCNA)
(M) CompTIA Security+/EC-Council Certified Network Defender (CND)
(O) CompTIA CySA+/EC-Council Certified Incident Handler (CIH)
(O) CompTIA CASP+/EC-Council Computer Handling Forensics Investigator (CHFI)

(M) - Mandatory
(O) – Optional