Cyber Forensic Lead

About the role

The Cyber Forensic Lead will head investigations into cyber incidents, digital fraud, and data breaches across a range of banking channels. The role requires deep technical expertise to collect, preserve, and analyse digital evidence while supporting legal, regulatory, and internal stakeholders.

Key responsibilities

• Conduct forensic investigations of cyber incidents, including malware, ransomware, phishing, fake banking apps, and insider misuse.
• Analyse fraud and security events across mobile banking, internet banking, APIs, payment gateways, ATMs, wallets, and social media.
• Perform malicious application analysis, reviewing APK/IPA files, permissions, certificates, hashes, URLs, IPs, and domains.
• Maintain evidence handling, chain‑of‑custody, and documentation for audits, legal proceedings, and law‑enforcement coordination.
• Prepare comprehensive forensic reports covering scope, methodology, timeline, impact, Indicators of Compromise, and remediation recommendations.
• Support SBP reporting, information sharing, and takedown of fraudulent digital assets.
• Recommend improvements to detection and monitoring controls, including SIEM use cases, EDR/XDR rules, and threat‑intelligence indicators.
• Maintain forensic readiness through updated procedures, checklists, and toolsets.

Required profile

• 4‑5 years of experience in cyber forensics, incident response, or digital fraud investigations.
• Strong understanding of banking digital channels and regulatory requirements.
• Ability to work with cross‑functional teams such as SOC, compliance, legal, and risk management.
• Excellent analytical and report‑writing skills.

Required skills

• SIEM
• EDR/XDR
• Malware analysis
• Reverse engineering
• Forensic analysis tools