Sr. Cyber Analyst, Digital Forensics Incident Response
Core
Deliver incident investigation and response services to insureds via forensically sound evidence collection, analysis, timeline development, root cause identification, and incident recovery.
Role type
Senior IC Digital Forensics and Incident Response (DFIR) Analyst
Builds
Incident response engagements, forensic reports, and recovery solutions for insured clients
Domain
Cybersecurity / Insurance (InsurSec)
Deliverable
client delivery
Required skills
Digital forensics, incident response, malware analysis, threat hunting, network forensics, EDR/EPP technologies, Windows/Linux OS expertise, incident recovery operations
Preferred skills
Cloud security (AWS/Azure/GCP), law enforcement or government/military investigation background, experience in top-10 cyber consulting firms
Technologies
EDR, EPP, decryptor tools, backup restoration tools
Responsibilities
Collect, transmit, and store digital evidence; analyze evidence to identify indicators of compromise; develop incident timelines and theories of compromise; identify root causes; participate in threat actor negotiations; lead incident recovery activities; develop and deliver incident reports and mitigation recommendations; conduct incident response training and simulations
Seniority
Senior, hands-on IC