Security Engineer – DFIR Lab

About the role

We are seeking a Security Engineer to lead the management and operation of our Digital Forensics and Incident Response (DFIR) Lab. The role involves ensuring the lab’s hardware, software, processes and documentation are maintained at the highest standards to support cyber‑incident engagements.

Key responsibilities

• Maintain and manage DFIR Lab hardware, workstations, servers, storage and networking equipment, guaranteeing availability and performance.
• Keep the lab’s asset inventory up to date and assist with license renewals, purchases and budgeting.
• Deploy, configure and optimise forensic and incident‑response tools such as EnCase, Magnet Axiom, FTK, Cellebrite, THOR, Velociraptor, KAPE, IDA Pro and Security Onion.
• Implement access controls, logging, audit trails and monitoring to secure the lab environment and ensure data integrity.
• Develop and maintain scripts or automation solutions to streamline forensic workflows.
• Document lab configurations, SOPs, forensic processes and tool usage guidelines.
• Collaborate with customers to deploy hardware and software for assessments and incident‑response engagements.

Required profile

• Proven experience with digital forensics and incident response tools and methodologies.
• Strong knowledge of evidence management, data acquisition and forensic hardware (write blockers, specialised cables, adapters).
• Solid understanding of Linux system administration, networking devices (switches, routers, firewalls) and storage solutions (NAS).
• Hands‑on experience with virtualization platforms such as VMware ESXi (knowledge of Nutanix is a plus).

Required skills

• EnCase
• Magnet Axiom
• FTK
• Cellebrite
• THOR
• Velociraptor
• KAPE
• IDA Pro
• Security Onion
• FTK Imager
• Linux
• VMware ESXi
• Nutanix
• NAS
• Switches, routers and firewalls