DFIR Expert
Nebius — Israel · In-Person · Senior
Role description
Role Overview
Nebius is seeking a deeply technical DFIR Expert for its Digital Forensics and Incident Response (DFIR) team, working alongside the Security Operations Center (SOC). This role is a senior hands-on responder position, executing containment, eradication, and recovery on declared incidents and conducting the forensic investigations behind them.
What You Will Do
Execute the technical response to major incidents, conduct end-to-end forensic investigations, handle evidence, produce post-incident deliverables, and contribute to DFIR runbooks and tooling selection.
Why It Might Be a Fit
We expect you to have around 5 years of hands-on digital forensics and incident response experience, including significant technical roles in large-scale, high-impact incidents.
Requirements
- Around 5 years of hands-on digital forensics and incident response experience
- Experience responding to incidents in cloud or infrastructure-heavy environments
- Deep knowledge of Windows and Linux internals
- Cloud and container forensics capability
- Fluency in attacker TTPs (MITRE ATT&CK)
- Hands-on experience with EDR, SIEM, and forensic tooling
- Strong scripting and data-analysis skills
- Malware triage capability
- Certifications such as GCFE, GCFA, GNFA, GCFR, or GREM are an advantage
Benefits
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams