Principal Engineer - Digital Forensics
Core
Lead enterprise-wide digital forensics and incident response (DFIR) investigations, threat hunting, and forensic readiness for a highly regulated financial institution.
Role type
Principal Engineer - Digital Forensics (Strategy & Hands-on IC)
Builds
Scalable forensic acquisition workflows, automated analysis pipelines, and incident response playbooks for endpoint, cloud, network, and mobile environments.
Domain
Financial Services / Cybersecurity / Digital Forensics
Required skills
Digital forensics and incident response (DFIR), threat hunting, malware analysis (static/dynamic), memory forensics, reverse engineering, cloud incident response (AWS/Azure/GCP), scripting (Python/PowerShell), SIEM/EDR tooling, incident command coordination, forensic readiness design, executive reporting, team mentorship.
Preferred skills
Experience in highly regulated industries, formal reverse-engineering expertise, advanced cloud-native security tooling.
Technologies
Splunk, CrowdStrike, FTK, EnCase, X-Ways, Autopsy, Volatility, Cellebrite, JIRA, Confluence, Smartsheet, MS Project, SAFe, AWS, Azure, GCP.
Responsibilities
Perform Tier 3 investigations on critical cyber cases; conduct forensic analysis of hacking, malware, data breaches, and insider threats; identify and analyze digital evidence across endpoints, cloud, and networks; lead and execute advanced investigations to determine root cause and impact; design and maintain automated forensic workflows; serve as Incident Commander during major security events; conduct proactive threat hunting; develop incident response playbooks and forensic readiness capabilities; collaborate with Legal, Compliance, and Audit teams; mentor junior analysts.
Seniority
Principal, strategy & mentorship
