Technology, Data & Innovation – Cyber forensics investigation specialist– Assistant Vice President at Deutsche Bank in One Raffles Quay

Job description

Job Description: Details of the Division and Team: Every day, Deutsche Bank observes thousands of intrusion attempts. Integrated in Deutsche Bank’s Chief Security Office (CSO), the Information Security Threat Operations (ISTO) team is responsible for mitigating these risks. The Advanced Threat Response team, which consists of subject-matter experts in the areas of forensic investigations, malware analysis, and threat hunting, is part of the ISTO team. The Cyber Forensics Investigator will work alongside these other subject-matter experts to identify, investigate, and mitigate threats to Deutsche Bank’s infrastructure. The ideal professional will understand the process and procedures relative to complex investigations including evidence acquisition, examination and analysis of data from computers or other electronic storage devices. What we will offer you: A healthy, engaged and well-supported workforce is better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center. You can expect: Flexible benefits plan including virtual doctor consultation services Comprehensive leave benefits Gender Neutral Parental Leave Hybrid working arrangement 21/25 days of annual paid leave, plus public holiday A culture of continuous learning to aid progression Your key responsibilities: The Digital Forensics Investigator will investigate cyber-attacks on the Bank’s infrastructure, including malware infections, data leakage, policy breaches and insider threats. The candidate will provide incident response support and subject-matter expertise during global incidents. The candidate will also participate in technical meetings and working groups to address issues related to IT-security, protection against malware, and vulnerabilities. Responsible for conducting forensically sound collection and analysis of digital evidence (including hard disk images, system memory images, network logs, and other artifacts) using various tools in support of Cyber Security, Internal investigation functions, and Compliance. Work alongside local and global cyber forensics investigators, malware analysts and threat hunters to identify and mitigate threats embedded in the Bank’s infrastructure. Responsible for supporting and mentoring junior staff within the greater Information Security Threat Operations group. Work with the global team and external teams to drive innovations and projects and assist in the creation of processes/procedures and associated technical documentation. Conduct complex post-incident forensic analysis to investigate causes of intrusion, attack, loss, or breach occurring in an organisation. Identify and define forensic issues and root causes. Develop reports that detail incident timeline, evidence, findings, conclusions and recommendations. Support the design of a breach notification process after a security incident to minimise damage and downtime when attacks and exploits occur. Select, test, and deploy security products and collect information about Internet-based criminal activities. Recommend corrective actions to prevent and mitigate internal control failures Your skills and experience: 3+ years of experience working in the fields of digital forensics or incident response either in law enforcement or an enterprise environment. 5+ years of experience working in Information Technology (software development, IT administration, network engineering, etc.). Experience conducting senior-level digital forensics examinations on Windows/Linux/MacOS operating systems using industry standard forensic tools. Knowledge of computer forensic best practices and industry standard methodologies for acquiring and handling of digital evidence. Working knowledge of Endpoint Detection and Response (EDR) and SIEM tools. Knowledge of the cybercrime threat landscape (including threat actors, common TTP’s, etc). Abilit