{"id":1308673,"url":"https://alion.io/job/cyesec-ltd-dfir","title":"DFIR","company":{"id":2196214,"name":"Cyesec Ltd.","domain":"cyesec.com","url":"https://alion.io/company/cyesec","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"C","score":58,"open_postings":10,"ghost_share":0.7,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-09-28T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Herzliya, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":48000,"max_usd":136000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":309},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"ElasticSearch","optional":false},{"name":"Linux","optional":false},{"name":"Red Teaming","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-06-28T12:40:44Z","employer_posted_date":"2026-06-28","last_verified_at":"2026-09-28T10:06:37Z","board_verified":true,"closed_at":null,"days_open":92,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":91},"description":"Cye's DFIR team is responsible for responding to our clients' cyber incidents and crises.\nOur group is expanding. If you see yourself in the front line of the cybersecurity domain as a digital forensic and incident response (DFIR) talent, your place is with us. As a DFIR team member, you will participate in hands-on security research and investigations, helping our customers understand and mitigate cyber threats and attacks.\nResponsibilities\nPerform incident response lifecycle and real-time activities, including detection and analysis, containment and eradication, and recovery\nPerform incident response in a cloud environment (Azure, AWS etc.).\nPerform digital forensics investigations\nResearch and analyze tactics, techniques, and procedures (TTPs) used by malicious actors\nPerform hunt-evil and find-evil activities for proactively detecting attacks\nWork closely with our in-house red team, CTI, and cyber architect teams\nWork closely with worldwide companies, CISOs, and technology experts\nQualifications\n2-3 years of experience as a DFIR team member\nExperience with performing digital forensics in a cloud environment\nExperience with performing digital forensics of Windows-based and/or Linux-based platforms, network forensics, and analysis\nThorough understanding of threat hunting models, as well as cyber threat intelligence, including TTP and IoCs extraction and mapping\nExperience with research and data analysis of large DBs via Splunk, Elasticsearch, SQL, or VQL\nStrong understanding of targeted attacks; able to create customized tactical remediation plans\nGood written and verbal English communication skills","description_format":"text","description_chars":1628,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","AI Agents"],"lifecycle":[{"event":"open","at":"2026-09-26T15:15:14Z"}],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.158,"p_room":0.28,"age_days":91,"expected_fill_days":15,"reasons":["conf:16","stale_co","ghost","win:tail","crowd:junior"],"computed_at":"2026-09-28T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/cyesec-ltd-dfir","json_url":"https://alion.io/job/cyesec-ltd-dfir.json","meta":{"generated_at":"2026-09-29T02:17:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1928,"day_limit":5000,"remaining_today":3072,"minute_limit":60,"resets_at":"2026-09-30T00:00:00Z"}}}