Senior Analyst, Forensics

This is a fully remote position, open to applicants in Texas.

📋 Description

• Oversee Forensics analysis in support of the Forensic lead during ransomware and compromise investigations.

• Conduct forensic examinations of operating system artifacts and retrieve deleted items from Windows, Linux, Mac, and RAM/memory.

• Evaluate network and operating system log files, which include Windows Event, Unified Audit, Firewall, and VPN logs.

• Collaborate with the Security Operations Center to utilize Endpoint Detection and Response data for identifying Indicators of Compromise and Tactics, Techniques, and Procedures.

• Create clear and concise forensic findings and updates presented as narrative timelines tailored to the technical proficiency of the audience.

• Apply MITRE ATT&CK and Lockheed Martin’s Cyber Kill Chain to provide context for Indicators of Compromise.

• Review and compose incident reports, investigative updates, appendices, and materials directed by counsel using standardized templates.

• Conduct peer reviews of colleagues' reports.

• Formulate forensic investigation plans and collaborate with the lead to oversee project timelines, delivery, and execution.

• Undertake additional responsibilities as assigned by management.

⛳️ Requirements

• Bachelor’s degree in Information Security, Computer Science, Digital Forensics, Cyber Security, or a related field, along with 4+ years of incident response or digital forensics experience, or a Master’s or Advanced Degree with 3+ years of relevant experience.

• Hold two or more of the following certifications: Security +, Network+, SANS GCED, GCIH, GCFE, GCFA, CEH, CHFI, EnCe.

• Comprehensive understanding of Windows disk, Unix or Linux disk, and memory forensics.

• Familiarity with Network Security Monitoring (NSM), network traffic analysis, and log analysis.

• Experience and knowledge of enterprise security controls.

• Proficient with EnCase, Axiom, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open-source forensic tools.

• Skilled in Microsoft Suite products.

• Ability to prioritize tasks, work independently, and pursue objectives with minimal supervision.

• Strong problem-solving and critical-thinking abilities.

• Excellent verbal and written communication skills.

• Willingness to travel within or outside of the state.

• No physical exertion required; light work involving up to 20 pounds occasionally and/or up to 10 pounds frequently.

🏝️ Benefits

• Competitive salaries.

• Fully covered Medical/Dental benefits.

• Fully funded Life/Disability Insurance.

• 401(k) plan.

• Opportunity to engage with cutting-edge technology in the rapidly expanding cyber security sector.

• Equal employment opportunity.

• Reasonable accommodations for individuals with disabilities.