Digital Forensics and Incident Response Analyst
Core
Conduct investigations into cybersecurity incidents, data breaches, and insider threats; provide digital forensics capability and incident response support to the Security function.
Role type
Digital Forensics and Incident Response Analyst
Builds
Digital forensics lab, detection signatures, automations, and response improvements
Domain
Cybersecurity, Digital Forensics, Incident Response
Required skills
Digital forensics analysis, incident response lifecycle management, evidence collection and preservation, malware analysis, threat hunting, chain of custody procedures, forensic tool usage, scripting automation, SIEM/EDR platform operation
Preferred skills
Threat intelligence analysis, attacker TTPs knowledge, executive reporting, stakeholder communication
Technologies
EnCase, FTK, Autopsy, X-Ways, Volatility, KAPE, Wireshark, Cellebrite, Microsoft Sentinel, Splunk, Microsoft Defender, ServiceNow, Python, Bash, PowerShell, KQL, SPL
Responsibilities
Reconstruct cyberattack timelines and identify attacker techniques; respond to incidents across detection, containment, eradication, and recovery; collect and preserve digital evidence maintaining chain of custody; maintain and improve the digital forensics lab; perform threat hunting and intelligence analysis; produce technical and executive reports on investigations
Seniority
Mid-level, hands-on IC