Senior Associate, Digital Forensics and Incident Response (DFIR)

About the role

Prescient is looking for a Senior Associate to strengthen its Digital Forensics & Incident Response (DFIR) practice. The role will support multinational clients in investigating cyber incidents, preserving evidence, and delivering actionable findings.

Key responsibilities

• Lead and support investigations of ransomware, data breaches, insider threats, and other cyber incidents.
• Perform triage, forensic imaging, malware analysis, and log review across endpoints, servers, cloud services, and mobile devices.
• Preserve and analyze digital evidence in compliance with legal and regulatory standards.
• Reconstruct attack timelines by extracting and correlating data from multiple sources.
• Document methodologies and findings for litigation, regulatory inquiries, or internal reviews.

Required profile

• 3‑5 years of experience in digital forensics, incident response, or a related field.
• Strong analytical, communication, and interpersonal abilities.
• Ability to work independently and collaboratively within a fast‑paced environment.

Required skills

• Proficiency with forensic tools such as Magnet Axiom, EnCase, FTK, Cellebrite, XWays.
• Experience with EDR and cybersecurity platforms.
• Knowledge of cloud environments (Microsoft 365, G‑Suite, AWS).
• Hands‑on with operating systems (Linux, Windows, macOS, iOS) and file systems (FAT, NTFS, EXT).
• Data analysis using SQL, Python, Tableau, Splunk, and Excel.