Cyber Analyst, Digital Forensics Incident Response
Core
Deliver incident investigation and response services to insureds via forensically sound evidence collection, analysis, and recovery.
Role type
Cybersecurity Analyst (Digital Forensics and Incident Response)
Builds
Incident response services and recovery activities for insured clients
Domain
Insurance x Cybersecurity (InsurSec)
Deliverable
client delivery
Required skills
Digital forensics, incident response, malware analysis, intrusion detection, threat hunting, incident recovery, digital evidence collection, cyber threat intelligence, ransomware investigation, business email compromise investigation
Preferred skills
Cloud security (AWS, Azure, Google), law enforcement or government/military investigation background, top-10 cyber consulting firm experience, industry certifications (GCIH, Security+, CISSP)
Technologies
AWS, Azure, Google Cloud
Responsibilities
Collect, transmit, and store digital evidence; analyze evidence to identify indicators of compromise; develop incident timelines and theories of compromise; identify root causes; participate in threat actor negotiations; lead incident recovery activities; develop incident reports; provide risk mitigation recommendations; deliver incident response training and simulations
Seniority
Mid-level, hands-on IC