Cybersecurity Forensics and Incident Response Analyst
Core
Lead digital forensics and incident response activities, including triage, investigation, containment, eradication, recovery, and post-incident reporting across the full lifecycle.
Role type
Senior IC cybersecurity forensics and incident response analyst
Builds
Forensic artifacts, investigation reports, executive summaries, and improved detection/response workflows
Domain
Cybersecurity, digital forensics, incident response, threat hunting
Required skills
Digital forensics, incident response, malware analysis (static/dynamic), scripting (Python/Bash/PowerShell), Windows forensics, network forensics, SIEM/SOAR/EDR usage, threat hunting, root cause analysis, evidence preservation
Preferred skills
GIAC/ISC2/EC-Council/Offensive Security certifications, internal security tool development, cryptography, network security, security analytics, AI/ML in security, MITRE ATT&CK framework, packet capture analysis, virtualized environments
Technologies
EnCase, FTK, SIFT, X-Ways, Volatility, Sleuth Kit/Autopsy, Splunk, Velociraptor, Active Directory, SIEM, SOAR, EDR, firewalls, IDS/IPS, DNS, web proxies, WAF
Responsibilities
Lead and support digital forensics and incident response activities across the full lifecycle; Perform live-system, offline, and remote compromise investigations; Analyze malicious activity and attack techniques to identify root cause and business impact; Coordinate response activities across technical and business stakeholders; Prepare clear updates, reports, and executive summaries; Collaborate with SOC and threat intelligence teams to improve detection and response capabilities; Proactively identify emerging threats and hunt for suspicious activity
Seniority
Senior, hands-on IC