Assist in monitoring, identifying, and responding to cybersecurity incidents and alerts.
Support digital forensic investigations by collecting, preserving, and analyzing digital evidence in accordance with standard procedures.
Help in maintaining incident response documentation, case reports, and evidence logs.
Perform initial triage and root cause analysis for detected incidents.
Assist in the deployment and operation of forensic tools and SIEM solutions (e.g., Splunk, QRadar, ELK).
Contribute to the development of incident response playbooks and standard operating procedures (SOPs).
Collaborate with IT, SOC, and cybersecurity teams to mitigate ongoing threats.
Conduct post-incident reviews and recommend preventive measures.
Stay updated on the latest threats, vulnerabilities, and digital forensics techniques.

Cyber Security Analyst - DFIR