Cybersecurity Incident Response & Digital Forensics Specialist
New
J
JobgetherCybersecurity
Based in the United States; Fully remote working arrangement within the United States.Full-TimeSenior
Salary40 - 50 USD per hour
Apply NowOpens the employer's application page
Job Details
- Experience
- Minimum of 8 years of professional experience in cybersecurity, information security, or a related technical discipline; at least 5 years of hands-on experience in cybersecurity incident response, digital forensics, or security investigations.
- Required Skills
- Linux
Requirements
- Have at least 8 years of professional experience in cybersecurity, information security, or a related technical discipline.
- Have at least 5 years of hands-on experience in cybersecurity incident response, digital forensics, or security investigations.
- Demonstrate experience investigating incidents in enterprise or federal IT environments.
- Understand vulnerability exploitation, incident response methodologies, and digital forensic investigation processes.
- Have experience analyzing SIEM, EDR, endpoint, network, and cloud security logs.
- Have working knowledge of Windows and Linux operating systems, security architectures, and common cyberattack techniques.
- Be familiar with the CISA KEV Catalog, NIST SP 800-61, NIST SP 800-86, and federal cybersecurity practices.
- Have experience preserving digital evidence and producing technically defensible forensic investigation reports.
- Hold a bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline, or have equivalent professional experience.
- Hold at least one of these certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), or GIAC Cloud Forensics Responder (GCFR).
- Be able to manage urgent incidents, prioritize competing demands, and work to accelerated investigation timelines.
Responsibilities
- Conduct incident triage, forensic investigations, and security assessments to identify exploitation attempts, unauthorized access, and potential compromises.
- Investigate vulnerabilities in the CISA Known Exploited Vulnerabilities (KEV) Catalog and assess potential exploitation.
- Analyze endpoint, network, application, authentication, SIEM, EDR, vulnerability scanning, and cloud audit logs to detect suspicious activity and indicators of compromise.
- Perform digital forensic investigations into persistence, privilege escalation, lateral movement, command-and-control communications, and potential data exposure.
- Collect, preserve, examine, and document digital evidence in accordance with NIST SP 800-86 and forensic evidence-handling practices.
- Develop incident response strategies and recommend containment, eradication, recovery, and risk mitigation measures.
- Collaborate with cybersecurity teams, system administrators, cloud engineers, and other stakeholders to investigate and resolve incidents.
- Prepare forensic reports, incident timelines, technical findings, executive summaries, and remediation recommendations.
- Support time-sensitive incident response operations, maintain investigation records and chain-of-custody documentation, and ensure activities comply with applicable federal cybersecurity requirements and organizational policies.
View Full Description & ApplyYou'll be redirected to the employer's site
