Cybersecurity Incident Response, Digital Forensics Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Execute swift cybersecurity incident triage, forensic analysis, and security evaluations.

• Examine entries from the CISA Known Exploited Vulnerabilities Catalog and evaluate potential risks of exploitation.

• Review logs from endpoints, networks, applications, authentication systems, SIEM, EDR, vulnerability scanning, and cloud audits.

• Conduct forensic investigations focusing on persistence, privilege escalation, lateral movement, command-and-control communications, and possible data exposure.

• Gather, preserve, analyze, and document digital evidence in accordance with NIST SP 800-86 and forensic evidence-handling protocols.

• Formulate incident response plans and propose strategies for containment, eradication, recovery, and risk mitigation.

• Collaborate with cybersecurity teams, system administrators, cloud engineers, and other stakeholders.

• Escalate security breaches and provide actionable technical suggestions.

• Create forensic investigation reports, incident timelines, technical findings, executive summaries, and recommendations for remediation.

• Assist with incident acknowledgment, forensic triage, daily updates, and documentation for incident closeout.

• Maintain records of investigations, evidence logs, chain-of-custody documents, and technical artifacts.

• Ensure that incident response activities comply with federal cybersecurity standards, NIST guidelines, and organizational security policies.

⛳️ Requirements

• US Citizenship work authorization is mandatory.

• Over 8 years of professional experience in cybersecurity, information security, or related technical fields.

• At least 5 years of hands-on experience in cybersecurity incident response, digital forensics, or security investigations.

• Proven experience in investigating cybersecurity incidents within enterprise or federal IT environments.

• Strong comprehension of vulnerability exploitation, incident response protocols, and digital forensic methods.

• Experience in analyzing SIEM, EDR, endpoint, network, and cloud security logs.

• Proficient understanding of Windows and Linux operating systems, security architecture, and common attack strategies.

• Familiarity with the CISA KEV Catalog, NIST SP 800-61, NIST SP 800-86, and federal cybersecurity standards.

• Experience in preserving digital evidence and drafting technically sound investigation reports.

• Strong analytical, troubleshooting, technical writing, and communication skills.

• Capability to respond to urgent cybersecurity incidents and operate within fast-paced investigation timelines.

• A Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline, or equivalent professional experience is preferred.

• Preferred certifications include GCIH, GCFA, GCFE, GCFR, CISSP, or other pertinent cybersecurity credentials.

🏝️ Benefits

• Access to cutting-edge technology, training, and career development.

• Opportunities to collaborate with leading multinational clients.

• Established methodologies, processes, and mentoring for professional growth.

• Opportunities to engage with specialized services and advanced IT solutions.

• Continuous learning opportunities to enhance skills.

• Access to a growing R&D division focused on the latest technological advancements.