Technology, Data & Innovation – Digital Forensics Investigator - AVP

Position Overview

Details of the Division and Team:    

Every day, Deutsche Bank observes thousands of intrusion attempts. Integrated in Deutsche Bank’s Chief Security Office (CSO), the Information Security Threat Operations (ISTO) team is responsible for mitigating these risks. The Advanced Threat Response team, which consists of subject-matter experts in the areas of forensic investigations, malware analysis, and threat hunting, is part of the ISTO.

The Cyber Forensics Investigator will work alongside these other subject-matter experts to identify, investigate, and mitigate threats to Deutsche Bank’s infrastructure. The ideal professional will understand the process and procedures relative to complex investigations including evidence acquisition, examination and analysis of data from computers or other electronic storage devices. 

What we will offer you:         

A healthy, engaged and well-supported workforce is better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Hybrid working arrangement
• 25 days of annual paid leave, plus public holiday
• A culture of continuous learning to aid progression

Your key responsibilities:

The Cyber Forensics Investigator will investigate cyber-attacks on the Bank’s infrastructure, including malware infections, data leakage, policy breaches and insider threats. The candidate will provide incident response support and subject-matter expertise during global incidents. The candidate will also participate in technical meetings and working groups to address issues related to IT-security, protection against malware, and vulnerabilities.

• Responsible for conducting forensically sound collection and analysis of digital evidence (including hard disk images, system memory images, network logs, and other artifacts) using various tools in support of Cyber Security, Internal investigation functions, and Compliance.
• Work alongside local and global cyber forensics investigators, malware analysts and threat hunters to identify and mitigate threats embedded in the Bank’s infrastructure.
• Responsible for supporting and mentoring junior staff within the greater Information Security Threat Operations group.
• Work with the global team and external teams to drive innovations and projects and assist in the creation of processes/procedures and associated technical documentation.

Your skills and experience:

• 3+ years of experience working in the digital forensics or incident response in law enforcement or enterprise environment.
• 5+ years of experience working in Information Technology (software development, IT administration, network engineering, etc.).
• Experience conducting senior-level digital forensics examinations on Windows/Linux/MacOS operating systems using industry standard forensic tools.
• Knowledge of computer forensic best practices and industry standard methodologies for acquiring and handling of digital evidence.
• Working knowledge of endpoint detection and response (EDR) and SIEM tools.
• Knowledge of the cybercrime threat landscape (including threat actors, common TTP’s, etc).
• Ability to coordinate, work with and gain the trust of business stakeholders to achieve a desired objective.
• Ability to independently assess scope of forensic requests, effectively complete required digital forensic analysis, and possess the ability to write clear and concise reports for the intended audience.
• Strong collaborator who works well with others to solve problems and actively incorporates input from various sources.
• Bachelor’s degree in computer science or information technology Or Programming & Systems Analysis Or Science (Computer Studies) or other technology related field.
• Industry standard digital forensics certifications (CCE, GCFE, GCFA, CFCE, etc) or related advanced cyber-security certifications (GCIH, GREM, etc).
• Conduct complex post-incident forensic analysis to investigate   causes of intrusion, attack, loss, or breach occurring in an organisation.
• Identify and define forensic issues and root causes.
• Develop reports that detail incident timeline, evidence, findings, conclusions and recommendations.
• Recommend corrective actions to prevent and mitigate internal control failures
• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. click here to see what we do globally and in Singapore

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.
Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.
We welcome applications from all people and promote a positive, fair and inclusive work environment.