DFIR & Threat Intelligence Analyst
CDICyberdéfense·Casablanca, Maroc·Hybrid·Mid (2-5 yrs)·22 000 – 34 000 MAD brut / mois
Job Description
Investigate incidents like in the field, then turn each real case into a DFIR training scenario that teaches our clients' analysts incident response and forensic investigation.
Your mission:
- Run forensic investigations (disk, memory, logs, endpoints) and reconstruct attack chains.
- Produce threat intelligence (IOCs, TTPs, MITRE ATT&CK) and feed it into platform content.
- Design realistic DFIR scenarios (artifacts, timelines, exfiltration) deployable as labs.
- Write incident reports, playbooks and pedagogical solutions (FR/EN).
- Contribute to real investigations run with CAPVALUE CYBER SECURITY consultants.
Requirements
- 2 to 5 years in incident response, forensics or threat intelligence.
- DFIR tooling (Volatility, Autopsy, Velociraptor, EDR) and log analysis.
- MITRE ATT&CK, IOCs/IOAs and exfiltration/persistence techniques.
- Investigative rigor, excellent FR and EN writing.
- A plus: certification (GCFA, GCTI, GNFA).
What We Offer
- 22,000–34,000 MAD/month + bonus.
- Hybrid work, real cases to replay, unlimited forensic labs.
- DFIR/CTI certification budget.
- Direct defensive impact on dozens of organizations.
Related positions
SOC Analyst – Detection & Response (Blue Team)
Cyberdéfense · Casablanca, Maroc · CDI
Mobile and Web/Applications Penetration Testing Consultant (Mid-Level)
Cybersécurité Offensive · Casablanca, Maroc · CDI
GRC Consultant / Audit & Compliance (ISO 27001, NIST, CIS)
Gouvernance, Risques & Conformité (GRC) · Casablanca, Maroc · CDI
Cloud Security Engineer (Azure / AWS)
Cloud Security · Casablanca, Maroc · CDI
Apply Now
Submit your application directly online.