Senior Incident Response Forensic Investigator

We are DXC – a Fortune 500 global IT services leader.

In Bulgaria, we are among the largest IT employers, delivering the full spectrum of the company’s diverse technical portfolio. Our teams work across cutting-edge technologies, contributing to projects that span industries and geographies.

We foster continuous learning and professional growth, offering access to targeted training and certifications aligned with individual interests and career aspirations.

Our culture of collaboration, innovation, and shared values empowers professionals to grow and succeed.

The Senior Incident Response Forensic Investigator is responsible for delivering operational cybersecurity services to DXC accounts on time, on target, and with quality. This role focuses on delivery of incident response services by providing cybersecurity forensic investigation in emergency situations, along with detection, containment, and emergency remediation advice, across supported accounts.

• Act as a senior responder for high-severity security incidents, coordinating with the Security Incident Response Control Centre.

• Perform rapid identification, containment, and remediation of threats across enterprise environments.

• Collect, preserve, and analyze digital evidence from endpoints, servers, cloud platforms, and network devices in compliance with legal and regulatory standards.

• Conduct root cause analysis and produce detailed forensic reports for internal and external stakeholders.

• Design and maintain custom forensic tools (e.g., triage scripts, memory acquisition utilities) to enhance investigation efficiency.

• Automate repetitive tasks using programming languages such as Python, PowerShell, or C++ to improve response times and accuracy.

• Perform malware reverse engineering and memory analysis to uncover sophisticated attack techniques.

• University Degree/Diploma in Computer Science, Computer Engineering, Electrical Engineering, Management Information Systems or equivalent certifications (CHFI, CISSP, CEH, CompTIA Security +, GCIH, GREM, GCFA).

• 3+years of experience within Security Services or infrastructure services support (Systems NT, UX, Storage, Backups, DB’s or Network management), operations monitoring and end user support.

• Minimum of 2+ years’ hands-on technical knowledge of analyzing event logs/system logs, from Windows Operating Systems, Unix/Linux Operating Systems, Cisco PIX/Switches/Routers, Wireshark/Ethereal network dumps.

• Excellent knowledge of IT Operations, infrastructure services support (Systems NT, UX, Storage, Backups, DB’s or Network management), security incident and security processes

• Excellent understanding of ITSM/ITIL processes

• 3+ years of production experience building RESTful APIs with Node.js/Express/Socket.io, experience with TypeScript: type safety, generics, advanced types and PostgreSQL, Sequelize ORM, Git/Docker.