EY Forensic & Integrity Services in Gurugram is hiring a Consultant to work as a DFIR (digital forensics and incident response) analyst. You will investigate cyber security incidents, analyse digital evidence and help contain and remediate attacks.
Typical work: understanding incident scope and business impact, identifying evidence sources (logs, endpoint, network and security telemetry), reviewing alerts from SIEM, EDR, SOAR, IDS/IPS and email security tools, validating suspicious activity and reconstructing the attack path, supporting containment (endpoint isolation, IOC blocking, access restriction), and acquiring forensic images, memory captures and volatile data while preserving evidence integrity and documenting findings.
The listing asks for around 2 to 4 years of hands-on experience in investigations, triage and evidence collection for cyber incidents.