{"id":143902,"url":"https://alion.io/job/volexity-incident-response-and-forensic-analyst","title":"Incident Response and Forensic Analyst","company":{"id":52697,"name":"Volexity","domain":"volexity.com","url":"https://alion.io/company/volexity","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":86000,"max_usd":164000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":502},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"GCP","optional":false},{"name":"Google Workspace","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"Windows","optional":false},{"name":"Crowdstrike","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"SentinelOne","optional":true},{"name":"Volatility","optional":true}],"status":"live","first_seen_at":"2026-07-15T20:41:34Z","employer_posted_date":"2026-08-19","last_verified_at":"2026-11-02T10:53:42Z","board_verified":true,"closed_at":null,"days_open":109,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":109},"description":"Location: Remote (USA)\nExperience Level: Mid-level (Senior role may be considered for the right applicant)\nPosition Type: Volexity Incident Response & Advanced Threat Analysis\nJOB DESCRIPTION\nVolexity’s Incident Response and Forensic Analysts provide support and lead investigations related to a wide range of cyber-attacks. \nCandidates applying for this role should expect a job opportunity where they can:\nAnalyze and respond to everything ranging from widespread commodity threats to the most complex and advanced intrusions facing organizations today\nWork on investigations that evoke a sense of personal investment\nCollaborate with Volexity’s Network Security Monitoring, Threat Intelligence, and Engineering teams \nCandidates should have experience with analyzing systems and system artifacts, such as memory, disk images, logs, and network data, to determine root cause and impact. Analysts collaborate with Volexity's Threat Intelligence and client teams to uncover attacker activity, preserve digital evidence, and provide clear forensic findings.\nRESPONSIBILITIES\nResponsibilities of an Incident Response and Forensic Analyst will include but not be limited to:\nIncident Response: Lead and support investigations into security incidents, including APT intrusions, malware infections, ransomware, unauthorized access to cloud environments, and data breaches.\nDigital Forensics: Collect, preserve, and analyze digital evidence across endpoints, servers, cloud environments, and network systems, placing strong emphasis on memory forensics and volatile data analysis.\nTool & Process Development: Develop and refine forensic workflows, scripts, and methodologies to improve investigation effectiveness.\nReporting & Documentation: Produce detailed forensic reports, executive summaries, and technical briefs that clearly communicate findings.\nCross-Team Collaboration: Partner with our Network Security Monitoring, Threat Intelligence, and Engineering teams to share insights and strengthen detection and response capabilities within our solutions.\nProactive Assessments: Support threat-hunting activities, compromise assessments, and M&A cybersecurity assessments to identify weaknesses before incidents occur.\nTrusted Advisory: Serve as a trusted advisor to clients by addressing cybersecurity questions, providing expert guidance, and supporting their overall security posture.\nREQUIRED SKILLS\nAs an Incident Response and Forensic Analyst, the expected skillset should include:\nAt least 3-5 years of hands-on experience performing digital forensics during security incidents, including evidence acquisition, preservation, and analysis\nProficiency in analyzing host and network-based artifacts (logs, memory, disk images, network traffic) using command-line tools and scripts\nStrong knowledge of operating systems internals (Windows, Linux, macOS) and common attack techniques\nWell versed in investigating activity in Microsoft 365, Google Workspace, GCP, Azure, AWS, and OCI environments. \nExperience responding to complex breaches related to web applications, operating systems, embedded devices, and cloud services\nAbility to understand different attack techniques and how they relate to specific forensic artifacts\nFamiliar scripting with Python and Bash to automate forensic analysis, parse logs, and support incident response workflows\nExcellent written and verbal communication skills, with the ability to document and communicate findings to customers \nKnowledge of the current threat landscape and the TTPs of various threat actors\nResourceful self-starter who can work both with a team and independently, when required\nPREFERRED EXPERIENCE\nSuccessful candidates for this role may also demonstrate the following experience or skills:\nStrong understanding of computer memory structure and how it relates to memory forensics\nPrior use of memory analysis frameworks such as Volatility.\nFamiliarity with other commercial forensic platforms related to Windows, macOS, Linux, and iOS \nExperience with EDR/XDR platforms such as SentinelOne, Microsoft Defender for Endpoint, and CrowdStrike Falcon\nExperience responding to incidents in cloud environments, such as AWS or Azure\nCOMPENSATION\nCompensation may vary based on location, experience, and skills. We are open to discussing total compensation including benefits, equity, and professional development budget.\nVolexity values diversity and is an equal opportunity employer. All employment is decided on the basis of qualifications, merit, and business need.","description_format":"text","description_chars":4520,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity"],"lifecycle":[{"event":"open","at":"2026-07-15T20:41:34Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.324,"p_room":0.28,"age_days":109,"expected_fill_days":25,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/volexity-incident-response-and-forensic-analyst","json_url":"https://alion.io/job/volexity-incident-response-and-forensic-analyst.json","meta":{"generated_at":"2026-11-02T12:35:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17233,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52697},"rest":"https://alion.io/mcp/rest/get_company?id=52697"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvolexity-incident-response-and-forensic-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvolexity-incident-response-and-forensic-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvolexity-incident-response-and-forensic-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/volexity-incident-response-and-forensic-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvolexity-incident-response-and-forensic-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":143902}},{"tool":"search_jobs","arguments":{"company":"volexity.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":143902},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}