Sr. Cyber Analyst, Digital Forensics Incident Response
Core
Investigate and respond to cyber incidents for insured small businesses, including evidence collection, threat analysis, and incident recovery.
Role type
Senior IC Digital Forensics and Incident Response (DFIR) Analyst
Builds
Incident response services, forensic reports, and recovery solutions for At-Bay insureds
Domain
Cybersecurity, Digital Forensics, Incident Response
Deliverable
client delivery
Required skills
Digital forensics, incident response, malware analysis, threat hunting, network forensics, EDR/EPP technologies, Windows/Linux operations, ransomware investigation, business email compromise analysis, incident recovery, digital evidence collection
Preferred skills
Cloud security (AWS/Azure/GCP), law enforcement or military investigation background, top-10 cyber consulting firm experience, GCIH/Security+/CISSP certifications
Technologies
EDR, EPP, AWS, Azure, Google Cloud, decryptor tools, backup restoration tools
Responsibilities
Collect and analyze digital evidence to identify indicators of compromise, develop incident timelines and root cause theories, participate in threat actor negotiations, lead incident recovery activities, deliver incident reports to stakeholders, provide risk mitigation recommendations, conduct incident response training and simulations
Seniority
Senior, hands-on IC
