Digital Forensics Investigator (AVP)

About the role

Deutsche Bank's Information Security Threat Operations (ISTO) team, part of the Chief Security Office, investigates thousands of intrusion attempts each day. The Advanced Threat Response team, made up of experts in forensic investigations, malware analysis and threat hunting, is looking for a Digital Forensics Investigator to join it. The role covers complex investigations such as evidence acquisition and analysis of data from computers and other electronic storage devices.

Key responsibilities

• Investigate cyber-attacks on the Bank's infrastructure, including malware infections, data leakage, policy breaches and insider threats.
• Provide incident response support and subject-matter expertise during global incidents, and take part in technical meetings and working groups on IT security, malware protection and vulnerabilities.
• Collect and analyse digital evidence (hard disk images, memory images, network logs and other artefacts) using forensic tools, supporting Cyber Security, internal investigations and compliance.
• Work with local and global investigators, malware analysts and threat hunters to identify and mitigate threats.
• Support and mentor junior staff within the Information Security Threat Operations group.
• Drive innovation and projects with global and external teams, helping create processes, procedures and technical documentation.
• Conduct complex post-incident forensic analysis, identify root causes and develop reports covering incident timeline, evidence, findings, conclusions and recommendations.
• Support the design of a breach notification process, select and test security products, and recommend corrective actions to prevent internal control failures.

Required profile

• 3+ years of experience in digital forensics or incident response, in law enforcement or an enterprise environment.
• 5+ years of experience in Information Technology (software development, IT administration, network engineering, etc.).
• Bachelor's degree in computer science, information technology, programming and systems analysis, computer studies or another technology-related field.
• Industry-standard digital forensics certifications (CCE, GCFE, GCFA, CFCE, etc.) or related advanced cyber-security certifications (GCIH, GREM, etc.).
• Proven ability to use AI tools productively and ethically.

Required skills

• Senior-level digital forensics examinations on Windows/Linux/MacOS with industry-standard tools.
• Knowledge of computer forensic best practices and evidence acquisition methods.
• Working knowledge of EDR and SIEM tools.
• Knowledge of the cybercrime threat landscape, including threat actors and TTPs.
• Ability to coordinate with business stakeholders, write clear reports and collaborate across teams.

What we offer

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits, gender-neutral parental leave and 21/25 days of annual paid leave plus public holiday.
• Hybrid working arrangement and a culture of continuous learning.