Details of the Division and Team
Every day, Deutsche Bank observes thousands of intrusion attempts. Integrated in Deutsche Bank's Chief Security Office (CSO), the Information Security Threat Operations (ISTO) team is responsible for mitigating these risks. The Advanced Threat Response team, which consists of subject-matter experts in the areas of forensic investigations, malware analysis, and threat hunting, is part of the ISTO team.
The Cyber Forensics Investigator will work alongside these other subject-matter experts to identify, investigate, and mitigate threats to Deutsche Bank's infrastructure. The ideal professional will understand the process and procedures relative to complex investigations including evidence acquisition, examination and analysis of data from computers or other electronic storage devices.
What we will offer you
A healthy, engaged and well-supported workforce is better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That's why we are committed to providing an environment with your development and wellbeing at its center.
You can expect:
•Flexible benefits plan including virtual doctor consultation services
•Comprehensive leave benefits
•Gender Neutral Parental Leave
•Hybrid working arrangement
•21/25 days of annual paid leave, plus public holiday
•A culture of continuous learning to aid progression
Your key responsibilities
The Digital Forensics Investigator will investigate cyber-attacks on the Bank's infrastructure, including malware infections, data leakage, policy breaches and insider threats. The candidate will provide incident response support and subject-matter expertise during global incidents. The candidate will also participate in technical meetings and working groups to address issues related to IT-security, protection against malware, and vulnerabilities.
•Responsible for conducting forensically sound collection and analysis of digital evidence (including hard disk images, system memory images, network logs, and other artifacts) using various tools in support of Cyber Security, Internal investigation functions, and Compliance.
•Work alongside local and global cyber forensics investigators, malware analysts and threat hunters to identify and mitigate threats embedded in the Bank's infrastructure.
•Responsible for supporting and mentoring junior staff within the greater Information Security Threat Operations group.
•Work with the global team and external teams to drive innovations and projects and assist in the creation of processes/procedures and associated technical documentation.
•Conduct complex post-incident forensic analysis to investigate causes of intrusion, attack, loss, or breach occurring in an organisation.
•Identify and define forensic issues and root causes.
•Develop reports that detail incident timeline, evidence, findings, conclusions and recommendations.
•Support the design of a breach notification process after a security incident to minimise damage and downtime when attacks and exploits occur.
•Select, test, and deploy security products and collect information about Internet-based criminal activities.
•Recommend corrective actions to prevent and mitigate internal control failures
Your skills and experience
•3+ years of experience working in the fields of digital forensics or incident response either in law enforcement or an enterprise environment.
•5+ years of experience working in Information Technology (software development, IT administration, network engineering, etc.).
•Experience conducting senior-level digital forensics examinations on Windows/Linux/MacOS operating systems using industry standard forensic tools.
•Knowledge of computer forensic best practices and industry standard methodologies for acquiring and handling of digital evidence.
•Working knowledge of Endpoint Detection and Response (EDR) and SIEM tools.
•Knowledge of the cybercrime threat landscape (including threat actors, common TTP's, etc).
•Ability to coordinate, work with and gain the trust of business stakeholders to achieve a desired objective.
•Ability to independently assess the scope of forensic requests, effectively complete required digital forensic analysis, and possess the ability to write clear and concise reports for the intended audience.
•Strong collaborator who works well with others to solve problems and actively incorporates input from various sources.
•Bachelor's degree in computer science or information technology Or Programming & Systems Analysis Or Science (Computer Studies) or other technology related field.
•Industry standard digital forensics certifications (CCE, GCFE, GCFA, CFCE, etc) or related advanced cyber-security certifications (GCIH, GREM, etc).
•Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.
About us and our teams
Deutsche Bank is the leading German bank with strong European roots and a global network.
