Job description

The Security Engineer – DFIR Lab at CPX is responsible for managing and maintaining the Digital Forensics and Incident Response (DFIR) Lab’s full infrastructure, encompassing hardware, software, processes, and documentation. The role ensures the lab operates at optimal performance and adheres to strict security, privacy, and data integrity standards. The engineer will oversee forensic workstations, laptops, and servers, configuring and optimizing environments for both proactive and reactive incident response. They will manage software and tool deployments such as EnCase, Magnet Axiom, FTK, Cellebrite, THOR, Velociraptor, and KAPE, while maintaining asset inventories, licenses, and budgets. The position also requires developing and maintaining scripts and automation tools to streamline lab workflows, creating detailed SOPs and documentation, and assisting in live customer deployments during forensic assessments or incident response engagements. Strong technical experience with Linux, Windows, and Mac operating systems, network devices, storage systems (NAS), and virtualization technologies like VMware ESXi is crucial. The role demands deep familiarity with forensic processes, evidence management, cloud environments, and cybersecurity toolsets. Certifications such as CCE, CHFI, GCFE, INE Security, or Microsoft/Azure/VMware/RedHat credentials are preferred.