Incident Response Specialist – Digital Forensics (DFIR)

🕒 July 27

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Vision Cybersecurity

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

Cybersecurity

Vision Cybersecurity is a cybersecurity-focused company. The available information is mostly website/CSS fragments and Portuguese UI text (e. g. , 'Siga nossas redes sociais', 'Ouça o Podcast Safetalks'), which indicates the company maintains an online presence and produces content such as a podcast. There are no explicit details about specific products, services, customers, or company size in the provided text. Based on the name and the content, the primary focus is cybersecurity.

📋 Description

• Act in response to cybersecurity incidents, conducting identification, containment, eradication, recovery, and lessons learned • Perform forensic analysis on workstations, servers, virtualized environments, mobile devices, and cloud environments • Collect, preserve, and analyze digital evidence, ensuring the integrity of the chain of custody • Perform memory forensics, disk forensics, and analysis of operating system artifacts • Identify techniques, tactics, and procedures (TTPs) used by malicious actors • Conduct compromise investigations involving malware, ransomware, phishing, credential compromise, lateral movement, persistence, data exfiltration, and privilege escalation • Develop and execute Threat Hunting hypotheses during incident investigations • Prepare technical and executive reports containing event timelines, attack analysis, impact, root cause, indicators of compromise (IoCs), and mitigation recommendations • Support SOC, Engineering, Infrastructure, and Cloud teams during containment and recovery activities • Analyze logs from SIEM, EDR, Firewalls, Active Directory, Microsoft 365, Entra ID, VPN, Proxy, IDS/IPS, and other telemetry sources • Develop scripts and automations to optimize investigation and response activities • Support the creation and update of playbooks, operational procedures, and technical documentation • Participate in incident response war rooms, working with multidisciplinary teams and clients during critical incidents • Support tabletop exercises and continuous improvement activities for incident response capabilities • Stay up to date on new threats, vulnerabilities, offensive techniques, and investigative tools

🎯 Requirements

• Bachelor's degree in Information Technology or another degree related to Information Security is desirable • 3 years of experience in incident response, forensic analysis, and handling cyber threats • Solid experience with intrusion detection, log analysis, and security tools such as SIEM, EDR, Firewalls, and WAF • Practical knowledge of security frameworks such as MITRE ATT&CK, NIST, and OWASP • Knowledge of cyber threat analysis and security models such as the Cyber Kill Chain • Hands-on knowledge of security systems, including Firewalls, WAF, Endpoint Security, Proxy, and Anti-spam • Ability to prepare detailed technical reports • Intermediate English for technical interpretation and communication in international environments

🏖️ Benefits

• Bradesco Top National Health Plan • Odontoprev Dental Plan • Life insurance • Pipo Saúde: Digital health and corporate benefits brokerage • TotalPass: Platform that connects you to various networks to help support your well-being (and your family's) • Transportation voucher (commuting allowance) • Alelo Tudo: Food and Meal combined card • Private pension: double match — VISION contributes on your behalf • Birthday day off: enjoy a day off during your birthday month • Referral program: earn cash for successful referrals • Discounts at educational institutions • Vision Baby Kit: because new beginnings deserve care and celebration • Exclusive discounts with the SESC group: leisure for you and your family • Welcome kit: a comprehensive kit to support your day-to-day at work • Breakfast and afternoon fruit provided on on-site days