Sr Incident Response & Digital Forensics Analyst

Overview

We are seeking an experienced cybersecurity professional to take ownership of enterprise incident response, threat investigation, and digital forensics activities within a large-scale technology environment. This position plays a critical role in identifying, investigating, containing, and remediating security threats while driving continuous improvement of detection and response capabilities.

Key Responsibilities

• Direct and coordinate end-to-end response efforts for cybersecurity incidents, including triage, containment, remediation, recovery, and post-incident review.
• Investigate suspicious activity by analyzing security telemetry from systems such as security monitoring platforms, endpoint security solutions, network security controls, and infrastructure logs.
• Conduct forensic investigations on affected devices and systems, including examination of memory, storage media, and network activity while maintaining proper evidence handling procedures.
• Analyze potentially malicious files, scripts, and executables to identify indicators of compromise and support defensive actions.
• Produce comprehensive investigation documentation covering root causes, business impact, attack timelines, and recommended corrective actions.
• Partner with technical and non-technical stakeholders to communicate findings, response status, and risk mitigation strategies.
• Lead proactive threat hunting initiatives to uncover hidden threats and reduce organizational risk exposure.
• Assess existing security controls and recommend enhancements to improve detection, prevention, and response effectiveness.
• Share expertise with internal teams through coaching, knowledge transfer, and incident response best practice guidance.
• Maintain awareness of emerging attack techniques, threat actor behaviors, and evolving security technologies.

Required Qualifications

• Degree in Computer Science, Information Security, Information Technology, or a related discipline, or equivalent professional experience.
• At least 8 years of hands-on cybersecurity experience, particularly within incident response, threat investigation, detection engineering, or forensic analysis functions.
• Strong practical experience with enterprise security technologies, including security monitoring platforms, endpoint protection and detection solutions, network intrusion detection/prevention systems, vulnerability assessment tools, and firewall technologies.
• Advanced log investigation capabilities, including analysis of operating system, application, and network logs.
• Demonstrated expertise in incident response frameworks, workflows, and operational procedures.
• Experience using automation or scripting languages such as Python, PowerShell, or Bash to improve security operations efficiency.
• Strong accountability, initiative, and ownership mindset.
• Excellent analytical, troubleshooting, communication, and decision-making skills.
• Ability to remain effective during high-severity incidents and manage multiple investigations simultaneously.

Preferred Qualifications

• Industry-recognized cybersecurity certifications such as CISSP, GCIH, OSCP, CEH, or similar credentials.
• Experience operating within or supporting a Security Operations Center environment, including handling escalated security cases.
• Hands-on proficiency with forensic investigation platforms and malware analysis technologies.
• Experience investigating security incidents involving cloud infrastructure and cloud-native services.
• Familiarity with threat intelligence methodologies and adversary behavior frameworks such as MITRE ATT&CK.
• Ability to work effectively in global environments with diverse stakeholders.