Cyber Analyst, Digital Forensics Incident Response
Core
Deliver incident investigation and response services to insureds via forensically sound evidence collection, analysis, and recovery.
Role type
Cybersecurity Analyst (Digital Forensics and Incident Response)
Builds
Incident response services for insureds
Domain
Cybersecurity / Insurance
Deliverable
client delivery
Required skills
Digital forensics, Incident response, Malware analysis, Intrusion detection, Incident recovery, Threat intelligence, Evidence collection, Ransomware response, Business Email Compromise response
Preferred skills
Cloud security (AWS/Azure/GCP), Law enforcement or government/military investigation background, Cyber consulting firm experience, Industry certifications (GCIH, Security+, CISSP)
Technologies
AWS, Azure, Google Cloud, Decryptor tools
Responsibilities
Collect, transmit, and store digital evidence; Analyze evidence to identify indicators of compromise; Develop incident timelines and theories of compromise; Identify root causes; Participate in threat actor negotiations; Perform incident recovery (data restoration, reimaging, infrastructure rebuilding); Develop incident reports; Provide risk mitigation recommendations; Deliver incident response training and simulations
Seniority
Mid-level, hands-on IC
