DFIR Consultant

DFIR Consultant Department: Cyber Services and Capabilities Employment Type: Full Time Location: PHL Manila Reporting To: Darren James Description Role Purpose As a consultant, you will collaborate with various individuals and divisions within our business including the Cyber Incident Response Team, Threat Intelligence teams, Security Operations Centre teams, and our esteemed Red Team. Key Responsibilities Execution of technical tasks within our engagements. Responding to emergency incidents, including mitigation and remediation activities. Maintaining composure and effectiveness in client Incident Management scenarios. Providing clients with high‑quality technical investigations. Collaborating in the identification, resolution, and documentation of security incidents. Conducting intelligence‑driven investigative analysis. Capability to discuss wider technology and security posture with a client ultimately to perform Cyber Threat assessments. Strong documentation and written communication skills with technical report writing experience. Skills, Knowledge & Expertise What we are looking for in you 2 to 4 years of experience in incident response, security operations or strategic security consulting Experience evaluating client security controls, architecture, and operations. Familiarity with coding, scripting languages (BASH, Powershell, Python, PERL, RUBY etc.) or software development frameworks (.NET). Experience supporting a SOC program in incident response tools and techniques, specifically with forensics tools such as EnCase, Forensic Toolkit, etc. Experience with static and dynamic malware analysis, including reverse engineering of binaries. Ability to develop rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts to support analysis and detection efforts. Experience triaging Windows and Linux hosts. Experience with Network Traffic Analysis (PCAP data). Experience with Log Data Analysis. Ability to produce high‑quality written and verbal reports, presentations, recommendations, and findings to clients. Ability to evaluate/enhance processes and procedures. Experience with Cloud environments. Behaviours Focusing on Clients and Customers. Working as One NCC. Always Learning. Being Inclusive and Respectful. Delivery Brilliantly. Ways of working Focusing on Clients and Customers. Working as One NCC. Always Learning. Being Inclusive and Respectful. Delivering Brilliantly. Job Benefits We have a high‑performance culture which is balanced evenly with world‑class well‑being initiatives and benefits: Transportation and rice allowances Night differential, overtime pay and holiday pay 13thmonth pay and performancebased bonus plan Day1 HMO healthcare coverage for you and dependents Outpatient medicine reimbursement Group life insurance, accidental death & disability cover Employee Assistance Program (EAP) with 24/7 confidential counselling Generous vacation and sick leave, available from Day 1 Special Time Off: Take time off for those big moments in life, like getting married/civil ceremony, becoming a grandparent, and welcoming home a new pet. Company share plan & Sharesave scheme allowing discounted share purchase through monthly savings Important Information This role involves mandatory pre‑employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to screening as a mandatory requirement. We are committed to diversity and flexibility in the workplace. #J-18808-Ljbffr NCC Group