{"id":2145327,"url":"https://alion.io/job/at-bay-cyber-analyst-digital-forensics-incident-response","title":"Cyber Analyst, Digital Forensics Incident Response","company":{"id":171731,"name":"At-Bay","domain":"at-bay.com","url":"https://alion.io/company/at-bay-2","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":84,"open_postings":21,"ghost_share":0.19,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":105,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":80000,"max":115000,"currency":"USD","period":"year","gross":null,"usd_annual":115000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false}],"status":"live","first_seen_at":"2023-06-22T13:43:27Z","employer_posted_date":"2025-11-03","last_verified_at":"2026-11-03T10:26:26Z","board_verified":true,"closed_at":null,"days_open":1229,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":1229},"description":"Why you should join our At-Bay Security team:\nAt-Bay is a fast-growth InsurSec company (Insurance x Cybersecurity) on a mission to bring innovative products to the market that help protect small businesses from digital risks. As an InsurSec provider, we uniquely combine insurance with mission-critical security technologies, threat intelligence, and human expertise, to bridge the critical security capability gap that exists among SMBs in the community. We believe InsurSec is an $80B market opportunity and we are excited to expand our DFIR team in order to help expand our reach and influence in the business and security community, of which we serve 35,000 customers.\nThe Role:\nCybersecurity Analysts focused on Digital Forensics and Incident Response (DFIR) deliver incident investigation and response services to At-Bay insureds via:Forensically sound collection, transmission, and storage of digital evidence\nAnalysis of digital evidence to identify indicators of compromise and adversary activity\nDevelopment of incident timelines and theories of compromise\nIdentification of incident root causes\nParticipation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)\nParticipation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary\nDevelopment and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessary\nDevelopment and delivery of recommendations to mitigate the risk of future incidents for impacted insureds\nDevelopment and delivery of incident response training and simulations for targeted insureds\n\nKey skills:\nPrevious digital forensics and incident response experience\nStrong oral and written communication skills\nPrevious hands-on experience performing digital forensics and incident response, including several of the following:Business Email Compromise\nRansomware\nDigital evidence collection and analysis\nDevelopment and analysis of cyber threat intelligence\nLeadership of or participation in investigations involving digital evidence\nIntrusion detection / cyber threat hunting\nMalware analysis\nIncident recovery activities such as restoration of data from backups, operation of decryptor tools, etc. \n\nPrevious hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.)\nMinimum requirements:\n\nBachelor’s degree or equivalent\nMinimum of 2 years of experience in cybersecurity operations, incident response, incident recovery, or another security discipline\nWillingness to travel as needed to perform job functions\nPreferred requirements:\nSignificant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurity\nPrevious background in law enforcement or government/military with experience leading complex technical investigations\nKnowledge of cloud environments, including knowledge of cloud security products and services offered by major cloud service providers (e.g., AWS, Azure, Google)\nExperience in a top-10 cyber consulting firm or leading DFIR provider preferred\nOne or more industry cybersecurity certifications (e.g., GCIH, Security+, CISSP, etc.)\nWork location:\nUSA, Nationwide\nFully Remote \nOur estimated base pay range for this role is $80,000-$115,000 per year. Base salary is determined by a variety of factors including but not limited to market data, location, internal equitability, domain knowledge, experiences and skills. In general, if the position sparks your interest we encourage you to apply - our team prioritizes talent.\n #LI-CK1","description_format":"text","description_chars":3812,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-09T04:15:27Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.183,"p_room":0.28,"age_days":1229,"expected_fill_days":105,"reasons":["conf:0","ghost","win:tail","crowd:junior"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":115000,"is_top_pay":true},"html_url":"https://alion.io/job/at-bay-cyber-analyst-digital-forensics-incident-response","json_url":"https://alion.io/job/at-bay-cyber-analyst-digital-forensics-incident-response.json","meta":{"generated_at":"2026-11-03T12:35:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17417,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":171731},"rest":"https://alion.io/mcp/rest/get_company?id=171731"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fat-bay-cyber-analyst-digital-forensics-incident-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fat-bay-cyber-analyst-digital-forensics-incident-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fat-bay-cyber-analyst-digital-forensics-incident-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/at-bay-cyber-analyst-digital-forensics-incident-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fat-bay-cyber-analyst-digital-forensics-incident-response"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2145327}},{"tool":"search_jobs","arguments":{"company":"at-bay.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2145327},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}