Digital Forensics and Incident Response Analyst

This is a fully remote position, open to applicants in Arizona, +18 more states.

📋 Description

• Assist clients who are victims of cyber-attacks or have concerns about potential threats.

• Execute prompt incident response investigations across various security levels.

• Detect and manage malware and unauthorized intrusions.

• Guide clients on recovery and remediation strategies to restore normal business functions.

• Facilitate tabletop exercises and provide plan coaching.

• Perform forensic assessments of client systems to identify artifacts and indicators of compromise.

• Conduct triage, threat hunting, and maintain case management for incident response clients.

• Record evidence and findings, preparing comprehensive report outputs.

• Engage with clients during planning, information sharing, and technical support phases.

• Develop and present proactive initiatives, including tabletop exercises, plan coaching, and assessments.

• Advise clients on incident response program development.

• Stay updated on advancements in cyber forensics and attack strategies, enhancing personal skills.

• Attend and contribute to regular internal meetings.

• Participate in the on-call rotation, oversee CSIRT requests, respond to after-hours hotline inquiries, conduct incident triage, comply with SLAs, and resolve issues within set timeframes.

• Work standard hours of 8:00 AM to 5:00 PM in the employee's respective time zone, with occasional after-hours work and on-call responsibilities.

• Travel occasionally for conferences, on-site client projects, and team or company events.

⛳️ Requirements

• 3-5 years of experience in information security.

• 3-5 years of experience with Active Directory, Systems Administration, Exchange Administration, M365, and/or other cloud environments.

• 3-5 years of experience in presenting information security concepts.

• Previous experience in threat hunting and/or incident management.

• Experience in managing EDR and/or SIEM technologies.

• Familiarity with firewalls and best practices for network devices and logging.

• Strong understanding of computer systems administration in large environments.

• Proven analytical skills to interpret data, recognize trends, and ensure accuracy in deliverables.

• Capability to effectively communicate complex information to diverse audiences and actively listen to understand needs for effective solutions.

• Established customer service abilities and a client-focused approach, including relationship building, issue resolution, and a responsive client experience.

• Ability to explain highly technical subjects to non-technical individuals effectively.

• Proficient in managing large volumes of data.

• Skilled in using all Microsoft Office Suite applications.

• Preferred certifications include GCIH, GCFA, and ECIH.

• Candidates must reside in one of the eligible U.S. states; only individuals located in the United States will be considered.

• Willingness to participate in on-call rotation, including after-hours and weekend duties.

🏝️ Benefits

• Flexible schedules and options for remote or hybrid work.

• Employee Assistance Program (EAP).

• Support for mental wellbeing and sustainable work practices.

• Continuous learning opportunities and support for professional development.

• Medical, dental, and vision insurance coverage.

• Options for health savings, flexible spending, and dependent care savings accounts.

• Life and disability insurance benefits.

• 401(k) plan with employer matching up to 4%.

• Pet insurance coverage.

• Unlimited paid time off.

• Paid parental leave: 6 weeks of 100% regular pay for non-birthing parents and 12 weeks for birthing parents.

• 11 paid holidays.

• Volunteer time off.

• Minimal travel requirements, typically less than 5-10%.

• Reasonable accommodations provided during the hiring process.