Lead Security Analyst (Digital Forensics and Incident Response))
Core
Lead complex digital forensic investigations and incident response for cybersecurity incidents, insider threats, and legal/regulatory matters across enterprise systems.
Role type
Senior IC Lead Security Analyst (Digital Forensics and Incident Response)
Builds
Forensic reports, playbooks, and automated tooling for evidence collection and threat analysis.
Domain
Cybersecurity, Digital Forensics, Incident Response
Required skills
Digital forensics, Incident response, Threat analysis, Evidence handling, Chain of custody, Log analysis, Malware analysis, Reverse engineering, Cloud forensics, Automation scripting
Preferred skills
Legal/HR investigation experience, AI/LLM integration in DFIR, Open-source tool contribution, API integration for security platforms
Technologies
Magnet Forensics, EnCase, Volatility, MemProcFS, FTK, KAPE, UAC, Autopsy, Velociraptor, AWS, Azure, Kubernetes, Splunk, Microsoft Sentinel, Zscaler, ExtraHop, Wireshark, Python, PowerShell
Responsibilities
Lead digital forensic investigations involving cybersecurity incidents and insider threats; Conduct forensic acquisition and analysis of endpoints, cloud workloads, and network artifacts; Develop and maintain DFIR playbooks and standard operating procedures; Mentor junior investigators and contribute to the growth of the DFIR program; Produce clear and defensible forensic reports for stakeholders and legal counsel.
Seniority
Senior, hands-on IC with leadership responsibilities
