(ACTIVE) DFIR Associate Manager (Digital Forensics & Incident Response) ( | Cubao)

DFIR Associate Manager – Digital Forensics & Incident Response

Location: Cubao, Quezon City, Philippines
Work Setup: Hybrid
Work Shift: Shifting
Salary: Confidential – To be discussed during the Job Offer

Job Summary

We are seeking a DFIR Associate Manager to lead and support high-impact cybersecurity incident investigations and help strengthen clients' cyber resilience. The role involves digital forensics, incident response, threat hunting, malware investigation, and collaboration with security and business stakeholders.

Key Responsibilities

• Lead and support response activities during critical cybersecurity incidents.

• Investigate ransomware, malware infections, insider threats, data breaches, BEC, DDoS attacks, and APTs.

• Conduct forensic investigations to determine incident scope, impact, root cause, and remediation requirements.

• Perform digital forensic analysis across endpoints, servers, cloud environments, and mobile devices.

• Collaborate with security teams, business stakeholders, and management to coordinate response activities.

• Communicate investigation findings and provide actionable recommendations.

• Develop and improve incident response playbooks, procedures, and documentation.

• Conduct proactive threat hunting and security investigations.

• Help optimize security tools and detection capabilities.

• Mentor team members and conduct knowledge-sharing sessions on DFIR best practices.

Required Qualifications & Skills

• Minimum 5 years of Digital Forensics and Incident Response (DFIR) experience.

• Strong understanding of:

  • Incident Response Lifecycle

  • Digital Forensics Methodologies

  • MITRE ATT&CK Framework

  • Cyber Threat Investigation and Analysis

  • Windows and Linux Operating Systems

  • Networking and Security Fundamentals

• Hands-on experience with:

  • Memory, Disk, and Network Forensics

  • Malware Analysis

  • SIEM, Endpoint Security, Network Security, and Email Security technologies

• Experience with DFIR tools such as FTK, Autopsy, Volatility, EnCase, Magnet AXIOM, SIFT, and REMnux or similar platforms.

Nice-to-Have Skills

• Mobile Forensics – Android/iOS.

• Threat Intelligence and Threat Hunting.

• Python or PowerShell scripting and automation.

• Industry certifications such as GCFA, GCFE, GNFA , or other GIAC certifications.

Work Requirements

• Hybrid work arrangement with an office location in Cubao, Quezon City .

• Must be amenable to a shifting schedule .

• Applicants must currently be in the Philippines and have the legal right to live and work in the country.

• Must not be a current or former employee of the hiring organization.

Learning & Development

The role provides opportunities for continuous learning, advanced cybersecurity certifications, and upskilling in areas including:

• OSCP, OSDA

• CDSA, CPTS

• GCFA, GCFE, GMON, GCIH, GREM

• CRTO, CRTL

Certification sponsorship and upskilling opportunities may be available to support professional development.

Recruitment Process

1. CV Screening

2. Validation and further CV screening

3. Client Review

Pre-Screening Questions

1. How many years of Digital Forensics and Incident Response (DFIR) experience do you have?

2. What best describes your experience in cybersecurity incident response?

3. On a scale of 1–10, how would you rate your experience leading or supporting critical cybersecurity incident response activities?

4. What was your last drawn salary?

5. What is your salary expectation?

6. Are you amenable to a hybrid setup with a shifting schedule in Cubao?

7. What is your notice period?