Investigator, AI Developer

This is a fully remote position, open to applicants in Wisconsin.

📋 Description

• Conduct intricate forensic investigations, encompassing advanced memory forensics, malware triage, encrypted artifact recovery, and anti-forensics detection.

• Execute host and network digital forensics, log analysis, and threat hunting to support incident response activities.

• Utilize EDR solutions, cloud platforms (AWS, Azure, GCP), and threat intelligence for identifying and documenting attacker tactics, techniques, and procedures (TTPs).

• Engage in incident response across cloud, operational technology (OT), and conventional enterprise environments.

• Develop indicators of compromise and assist in creating comprehensive, defensible attack timelines.

• Design and develop proprietary investigation tools, automation scripts, and data products that enhance forensic workflows and team consistency.

• Convert repeatable investigation processes into functional prototypes by leveraging AI-assisted development, low-code platforms, and data visualization tools.

• Employ generative AI and AI coding assistants to minimize manual effort in triage, analysis, and reporting.

• Manage tools through documentation, version control, onboarding guides, and iterative improvements based on engagement feedback.

• Collaborate with senior practitioners to identify enhancements for tooling.

• Interact with client stakeholders and legal counsel throughout the engagement lifecycle.

• Produce thorough, defensible written reports detailing investigative findings.

• Present technical findings and tool outputs during client calls.

• Assist leadership in defining engagement scopes with methodical and innovative strategies.

⛳️ Requirements

• Bachelor’s Degree or equivalent professional experience.

• At least 3 years of experience in Digital Forensics and Incident Response (DFIR) with proven expertise in complex investigations.

• Minimum of 3 years’ experience in cybersecurity consulting and data-focused development or analysis.

• A minimum of 3 years’ experience in creating tools utilized in professional practice.

• At least 3 years’ experience with at least one data or development layer, such as Python, PowerShell, Power BI, Power Apps/Automate, SQL, or an equivalent stack.

• A minimum of 3 years’ experience with common DFIR toolsets including Volatility, X-Ways, FTK, EnCase, Autopsy, etc.

• Minimum of 3 years’ experience with Microsoft Windows, GNU/Linux, and macOS operating systems.

• A minimum of 3 years’ experience with memory forensics.

• At least 3 years’ experience in enterprise environments, Active Directory, and prevalent attack patterns.

• Minimum of 3 years’ experience with threat hunting on both endpoints and networks.

• A minimum of 3 years’ experience with industry-recognized incident response lifecycles and frameworks, such as SANS, NIST, MITRE, etc.

• Minimum of 3 years’ experience producing accurate, defensible, and well-documented analysis.

• At least 1 year of experience using AI coding assistants and generative tools as an integral part of daily development workflows.

• Minimum of 1 year of experience with Azure and cloud-native architectures, with a comfort level in using AI as a development accelerator.

• Experience with cloud forensics across AWS, Azure, and GCP; experience in OT/ICS environments is a plus.

• Proficiency in malware analysis, including unpacking, deobfuscation, behavior analysis, and reverse engineering.

• Experience with AI governance, responsible use frameworks, or tool validation in a security or consulting context.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and certifications.

• Flexible work arrangements and remote work options.

• A dynamic and inclusive work environment that values diversity.