{"id":3725456,"url":"https://alion.io/job/softthink-solutions-cybersecurity-incident-response-digital-forensics-specialist","title":"Cybersecurity Incident Response, Digital Forensics Specialist","company":{"id":4506465,"name":"Softthink Solutions","domain":"softthink.com","url":"https://alion.io/company/softthink-solutions","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":40,"max":50,"currency":"USD","period":"hour","gross":null,"usd_annual":100000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"KEV","optional":false},{"name":"Linux","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-04T05:06:46Z","employer_posted_date":null,"last_verified_at":"2026-11-04T05:06:46Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Job Description:\n Conduct rapid cybersecurity incident triage, forensic investigations, and security assessments\n Investigate CISA Known Exploited Vulnerabilities Catalog entries and assess potential exploitation\n Analyze endpoint, network, application, authentication, SIEM, EDR, vulnerability scanning, and cloud audit logs\n Perform forensic investigations into persistence, privilege escalation, lateral movement, command-and-control communications, and potential data exposure\n Collect, preserve, analyze, and document digital evidence following NIST SP 800-86 and forensic evidence-handling practices\n Develop incident response plans and recommend containment, eradication, recovery, and risk mitigation strategies\n Collaborate with cybersecurity teams, system administrators, cloud engineers, and stakeholders\n Escalate security compromises and provide actionable technical recommendations\n Prepare forensic investigation reports, incident timelines, technical findings, executive summaries, and remediation recommendations\n Support incident acknowledgment, forensic triage, daily status updates, and incident closeout documentation\n Maintain investigation records, evidence logs, chain-of-custody documentation, and technical artifacts\n Ensure incident response activities align with federal cybersecurity requirements, NIST guidance, and organizational security policies\nRequirements:\n US Citizen work authorization required\n 8+ years of professional experience in cybersecurity, information security, or related technical disciplines\n 5+ years of hands-on experience in cybersecurity incident response, digital forensics, or security investigations\n Demonstrated experience investigating cybersecurity incidents within enterprise or federal IT environments\n Strong understanding of vulnerability exploitation, incident response processes, and digital forensic methodologies\n Experience analyzing SIEM, EDR, endpoint, network, and cloud security logs\n Working knowledge of Windows and Linux operating systems, security architecture, and common attack techniques\n Familiarity with the CISA KEV Catalog, NIST SP 800-61, NIST SP 800-86, and federal cybersecurity practices\n Experience preserving digital evidence and preparing technically defensible investigation reports\n Strong analytical, troubleshooting, technical documentation, and communication skills\n Ability to respond to urgent cybersecurity incidents and work within accelerated investigation timelines\n Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent professional experience is listed as a preferred qualification\n Preferred certifications include GCIH, GCFA, GCFE, GCFR, CISSP, or other relevant cybersecurity certifications\nBenefits:\n Cutting-edge technology, training, and career guidance\n Opportunities to work with leading multinational clients\n Established methodologies, processes, and mentoring\n Opportunities to work with specialized services and advanced IT solutions\n Continuous learning opportunities\n Access to a growing R&D division exploring the latest technological developments","description_format":"text","description_chars":3126,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response"],"lifecycle":[{"event":"open","at":"2026-11-04T05:06:46Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":29,"reasons":["seen:2","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":100000,"is_top_pay":false},"html_url":"https://alion.io/job/softthink-solutions-cybersecurity-incident-response-digital-forensics-specialist","json_url":"https://alion.io/job/softthink-solutions-cybersecurity-incident-response-digital-forensics-specialist.json","meta":{"generated_at":"2026-11-06T11:28:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20879,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4506465},"rest":"https://alion.io/mcp/rest/get_company?id=4506465"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsoftthink-solutions-cybersecurity-incident-response-digital-forensics-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsoftthink-solutions-cybersecurity-incident-response-digital-forensics-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsoftthink-solutions-cybersecurity-incident-response-digital-forensics-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/softthink-solutions-cybersecurity-incident-response-digital-forensics-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsoftthink-solutions-cybersecurity-incident-response-digital-forensics-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3725456}},{"tool":"search_jobs","arguments":{"company":"softthink.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3725456},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}