Cyber DFIR Analyst — Incident Response & Forensics

ICE Clear Europe Limited; Provo (UT); On-site; USD 70,000 - 110,000; Full time

Job summary

Intercontinental Exchange, Inc. is seeking a cybersecurity DFIR professional in Provo, Utah to join the ICE Cybersecurity Digital Forensics and Incident Response team. You will analyze data, hunt threats, and respond to incidents using forensics techniques and a broad set of controls.

You will collaborate across Windows and Linux environments, monitor networks, and develop timely incident timelines while maintaining professionalism and clear communication.

Qualifications

• Understanding of networking and its application.
• University degree in a related discipline or at least one year in an information security role.
• Hands on experience with Windows and Linux.

Responsibilities

• Security Analytics - Distill actionable information from large data sets for reporting, hunting, and anomaly detection
• Incident Management - Detect, document, investigate, and resolve security incidents in an efficient manner
• Endpoint Forensics - Construct meaningful incident timelines from forensic artifact analysis
• Counter Measures - Design and implement preventative and corrective controls to counteract emerging threats
• Proactive Threat Hunting - Develop and execute focused plans to discover advanced threats that evade traditional security controls
• Behavioral Analysis - Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity
• Intrusion Detection - Develop and tune network anomaly control capability to produce reliable actionable data

Skills

Networking concepts

Windows

Linux

Information security

Communication

Teamwork

Problem solving

Professionalism

Education

Bachelor's degree in related discipline

Job description

Intercontinental Exchange, Inc. is seeking a cybersecurity DFIR professional in Provo, Utah to join the ICE Cybersecurity Digital Forensics and Incident Response team. You will analyze data, hunt threats, and respond to incidents using forensics techniques and a broad set of controls.

You will collaborate across Windows and Linux environments, monitor networks, and develop timely incident timelines while maintaining professionalism and clear communication.