Cybersecurity Incident Response, Digital Forensics Specialist

Job Description:

• Conduct rapid cybersecurity incident triage, forensic investigations, and security assessments
• Investigate CISA Known Exploited Vulnerabilities Catalog entries and assess potential exploitation
• Analyze endpoint, network, application, authentication, SIEM, EDR, vulnerability scanning, and cloud audit logs
• Perform forensic investigations into persistence, privilege escalation, lateral movement, command-and-control communications, and potential data exposure
• Collect, preserve, analyze, and document digital evidence following NIST SP 800-86 and forensic evidence-handling practices
• Develop incident response plans and recommend containment, eradication, recovery, and risk mitigation strategies
• Collaborate with cybersecurity teams, system administrators, cloud engineers, and stakeholders
• Escalate security compromises and provide actionable technical recommendations
• Prepare forensic investigation reports, incident timelines, technical findings, executive summaries, and remediation recommendations
• Support incident acknowledgment, forensic triage, daily status updates, and incident closeout documentation
• Maintain investigation records, evidence logs, chain-of-custody documentation, and technical artifacts
• Ensure incident response activities align with federal cybersecurity requirements, NIST guidance, and organizational security policies

Requirements:

• US Citizen work authorization required
• 8+ years of professional experience in cybersecurity, information security, or related technical disciplines
• 5+ years of hands-on experience in cybersecurity incident response, digital forensics, or security investigations
• Demonstrated experience investigating cybersecurity incidents within enterprise or federal IT environments
• Strong understanding of vulnerability exploitation, incident response processes, and digital forensic methodologies
• Experience analyzing SIEM, EDR, endpoint, network, and cloud security logs
• Working knowledge of Windows and Linux operating systems, security architecture, and common attack techniques
• Familiarity with the CISA KEV Catalog, NIST SP 800-61, NIST SP 800-86, and federal cybersecurity practices
• Experience preserving digital evidence and preparing technically defensible investigation reports
• Strong analytical, troubleshooting, technical documentation, and communication skills
• Ability to respond to urgent cybersecurity incidents and work within accelerated investigation timelines
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent professional experience is listed as a preferred qualification
• Preferred certifications include GCIH, GCFA, GCFE, GCFR, CISSP, or other relevant cybersecurity certifications

Benefits:

• Cutting-edge technology, training, and career guidance
• Opportunities to work with leading multinational clients
• Established methodologies, processes, and mentoring
• Opportunities to work with specialized services and advanced IT solutions
• Continuous learning opportunities
• Access to a growing R&D division exploring the latest technological developments