Cybersecurity Incident Response & Digital Forensics Specialist
Core
Investigate and respond to complex cybersecurity incidents across federal and enterprise IT environments, conducting forensic investigations and analyzing security events.
Role type
Senior IC cybersecurity incident response & digital forensics specialist
Builds
Incident response strategies, forensic investigation reports, and remediation recommendations
Domain
Cybersecurity, Federal IT, Enterprise Security
Required skills
Incident triage, digital forensics, vulnerability exploitation analysis, log analysis (SIEM/EDR/Endpoint/Network/Cloud), evidence preservation, incident response methodologies, technical documentation
Preferred skills
Threat hunting, malware analysis, post-incident reviews, cloud security monitoring
Technologies
Splunk, Microsoft Sentinel, Microsoft Defender for Endpoint, CrowdStrike Falcon, AWS CloudTrail, Azure Monitor, Microsoft Entra ID, NIST SP 800-61, NIST SP 800-86, CISA KEV Catalog
Responsibilities
Conduct rapid incident triage and forensic investigations; Analyze logs to detect suspicious activities and IOCs; Collect and document digital evidence per NIST standards; Develop incident response strategies and remediation measures; Prepare comprehensive forensic reports and executive summaries; Collaborate with security teams and stakeholders to resolve incidents.
Seniority
Senior, hands-on IC
