We are hiring a hands‑on Cyber Incident Response Analyst for a specialist digital and cyber security services provider that is strengthening its Digital Forensics and Incident Response (DFIR) capability. When a customer is breached, this is the person who gets the call, takes control of the investigation and sees it through to closure. This is an initial 12 month B2B contract, open to candidates based in Europe.ABOUT THE ROLEYou will lead investigations end to end: scoping the incident, acquiring and preserving evidence, carrying out host, memory, mobile and log forensics, establishing the timeline and root cause, and driving containment, eradication and recovery.Alongside the technical work, you will be the customer's trusted point of contact while an incident is live, keeping legal, IT, compliance and leadership stakeholders informed and aligned, often under real time pressure.Please note: this is a hands‑on investigator role. It is not a GRC, audit, policy, security architecture or pure SOC management position.



You need to be working in DFIR or incident response today and leading forensic investigations yourself.WHAT YOU WILL BE DOING- Leading incident response engagements from first notification through containment, recovery and lessons learned- Performing forensic analysis across endpoints, servers, memory, mobile devices, cloud and log sources- Acquiring and handling evidence in a forensically sound way, maintaining chain of custody throughout- Using tools such as EnCase, Magnet AXIOM, Cellebrite, Volatility and KAPE to reconstruct attacker activity- Identifying root cause, attacker TTPs, persistence and the full scope of compromise- Threat hunting across customer environments using EDR telemetry and other data sources- Acting as the primary customer contact during live incidents, coordinating with legal, IT and compliance teams- Writing clear investigation reports, executive summaries and remediation recommendations- Feeding lessons learned back into detectio

📌 Cyber Incident Response Analyst (Zaragoza)
🏢 TechShack
📍 Zaragoza