DFIR Consultant

cyberani solutions

Lead and coordinate end-to-end incident response activities, from detection to containment, eradication and recovery.

• Perform in-depth forensic analysis on compromised systems, endpoints, servers, networks, and cloud environments.
• Analyze malware, attack patterns, and adversary tactics (TTPs) to determine root cause and scope of incidents.
• Conduct proactive hunts to detect advanced threats within client environments before they cause damage.
• Collect, preserve, and document digital evidence following forensic best practices and legal chain-of-custody requirements.
• Produce detailed technical and executive-level incident reports, outlining findings, impact assessment, and remediation recommendations.
• Provide expert guidance on incident readiness, including tabletop exercises, playbook creation, and response plan development.
• Work closely with MSS teams, penetration testers, GRC consultants, and client IT/security teams during investigations.
• Evaluate and implement DFIR tools and automation to enhance operational efficiency.