Security Engineer – DFIR Lab

About the role

The Security Engineer will own the operation and evolution of our Digital Forensics and Incident Response (DFIR) Lab. You will ensure that the lab’s hardware, software, and processes are reliable, secure, and ready to support internal teams and client engagements.

Key responsibilities

• Maintain and manage DFIR Lab hardware, software, and asset inventory, supporting licensing, budgeting and procurement.
• Deploy, configure and optimise forensic tools such as EnCase, Magnet Axiom, FTK, Cellebrite, THOR, Velociraptor, KAPE, IDA Pro, Security Onion and related workstations, servers and storage.
• Implement access controls, logging, audit trails and monitoring to protect lab data integrity and privacy.
• Evaluate new tools and technologies, contribute recommendations and create SOPs for lab operations.
• Develop scripts or automation to streamline forensic workflows and improve efficiency.
• Collaborate with customers to provision hardware and software for assessments and incident‑response engagements.

Required profile

• Strong experience with Linux system administration and command‑line tools.
• Hands‑on knowledge of networking devices (switches, routers, firewalls) and storage solutions (NAS).
• Proficiency in virtualization platforms, especially VMware ESXi (experience with Nutanix is a plus).
• Familiarity with evidence management, data acquisition hardware (write blockers, specialised cables) and cloud‑based environments.

Required skills

• EnCase, Magnet Axiom, FTK, FTK Imager, Cellebrite, THOR, Velociraptor, KAPE, IDA Pro, Security Onion.
• Linux, Windows and macOS operating systems.
• VMware ESXi virtualization.
• Networking equipment configuration (switches, routers, firewalls).
• NAS storage management.