Cyber Analyst, Digital Forensics Incident Response
Core
Deliver incident investigation and response services to insureds via forensically sound evidence collection, analysis, and recovery.
Role type
Senior IC digital forensics and incident response (DFIR) analyst
Builds
Incident response services, evidence analysis, and recovery activities for insureds
Domain
Cybersecurity, Digital Forensics, Incident Response
Deliverable
client delivery
Required skills
Digital forensics, Incident response, Malware analysis, Threat intelligence, Incident recovery, Evidence collection, Root cause analysis, Report writing
Preferred skills
Cloud security (AWS/Azure/Google), Law enforcement or military background, Cyber consulting experience, GCIH/Security+/CISSP certification
Technologies
AWS, Azure, Google Cloud, Decryptor tools
Responsibilities
Collect, transmit, and store digital evidence; Analyze evidence to identify indicators of compromise; Develop incident timelines and theories of compromise; Identify root causes; Participate in threat actor negotiations; Perform incident recovery (data restoration, reimaging, infrastructure rebuilding); Develop incident reports; Deliver risk mitigation recommendations; Conduct incident response training and simulations
