Senior Digital Forensics Incident Response Engineer

About the role

Deloitte Innovation Hub is seeking a Senior Digital Forensics Incident Response Engineer to help clients recover from cyber incidents such as data leaks, ransomware attacks, and suspicious network activity. You will work directly with customers in Cairo, applying forensic expertise to restore business continuity.

Key responsibilities

• Execute technical investigations of cyber incidents, analysing Windows event logs, Linux artifacts, and network traffic.
• Correlate findings using EDR tools, SIEM platforms and monitoring solutions (e.g., Splunk, Microsoft Security Suite, CrowdStrike Falcon).
• Conduct in‑depth malware analysis, threat‑intel research and threat‑hunting projects.
• Provide tactical guidance on triage, containment, eradication and coordination during incidents.
• Perform forensic analysis of systems, networks and memory.
• Create custom Python scripts to parse log files, data sets and forensic images.

Required profile

• Senior‑level experience in digital forensics and incident response.
• Strong knowledge of Windows and Linux forensic artifacts.
• Hands‑on experience with SIEM and EDR tools.
• Ability to analyse malware and conduct threat‑hunting activities.

Required skills

• Python scripting
• Splunk
• Microsoft Security Suite
• CrowdStrike Falcon
• SIEM and EDR tooling
• Memory forensics
• Malware analysis
• Log file analysis

What we offer

• Opportunity to work on complex cyber security challenges for global clients.
• Access to Deloitte’s extensive learning resources and professional development programs.
• Collaborative environment within the Innovation Hub in Egypt.