Cybersecurity Forensics Analyst - Expert
Core
Expert in digital forensics and eDiscovery conducting investigations, processing digital evidence for litigation, and responding to cybersecurity incidents.
Role type
Senior IC cybersecurity forensics analyst (eDiscovery/DFIR)
Builds
Forensic reports, evidence preservation, incident response documentation
Domain
Financial services cybersecurity and legal eDiscovery
Required skills
Digital forensics, eDiscovery, incident response, chain of custody, file recovery, legal liaison, court testimony, evidence processing, metrics tracking, vendor management
Preferred skills
Enterprise eDiscovery tools, EnCase, Access Data Forensics Toolkit, SIEM, DLP, IPS, Anti Malware, Firewalls, runbook maintenance, architecture input, hardware/software/network knowledge
Technologies
EnCase, Access Data Forensics Toolkit, SIEM, DLP, IPS, Anti Malware, Firewalls
Responsibilities
Conduct forensic investigations and CIRT functions; advise lawyers on data relevance; testify in court; analyze suspicious activity; process and preserve digital evidence; maintain chain of custody; recover deleted data; track forensics metrics; manage vendor roadmaps; provide after-hours on-call support
Seniority
Senior, hands-on IC