Sr. Cyber Analyst, Digital Forensics Incident Response
Core
Lead digital forensics and incident response investigations for insured clients, including evidence collection, threat analysis, and incident recovery.
Role type
Senior hands-on IC Digital Forensics and Incident Response (DFIR) Analyst
Builds
Incident response services, forensic reports, and recovery solutions for At-Bay insureds
Domain
Cybersecurity, Digital Forensics, Incident Response
Deliverable
client delivery
Required skills
Digital forensics, incident response, malware analysis, threat hunting, network forensics, EDR/EPP technologies, Windows/Linux administration, incident recovery, business email compromise analysis, ransomware response
Preferred skills
Cloud security (AWS/Azure/GCP), law enforcement or government/military investigation background, top-10 cyber consulting firm experience, industry certifications (GCIH, Security+, CISSP)
Technologies
Windows, Unix/Linux, AWS, Azure, Google Cloud, EDR, EPP, decryptor tools
Responsibilities
Collect, transmit, and store digital evidence forensically; analyze evidence to identify indicators of compromise; develop incident timelines and theories of compromise; identify root causes; participate in threat actor negotiations; lead incident recovery activities; develop incident reports for stakeholders; deliver risk mitigation recommendations; conduct incident response training and simulations
Seniority
Senior, hands-on IC