Cyber Incident Response & Forensics Expert

Fairweather, LLC; Austin (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Fairweather, LLC seeks an experienced Cyber Incident Response Analyst to lead investigations and respond to security incidents in an onsite role across Austin and San Antonio. The position requires hands-on forensic analysis, malware assessment, and strong communication of findings to technical and non-technical stakeholders.

The candidate will triage, contain, and recover from incidents, coordinate with SOC tools and threat intel, and contribute to playbooks and post‑incident reviews.

Qualifications

• 5+ years of experience in Cybersecurity Incident Response, Security Operations, or Digital Forensics.
• Hands‑on experience with Windows and Linux incident response and forensic investigations.
• Experience with SIEM/EDR/IDS/IPS and security monitoring platforms.
• Experience using tools such as CrowdStrike, SentinelOne, Microsoft Sentinel, NetWitness, Corelight, Gravwell, or Google SecOps.
• Knowledge of malware analysis, memory analysis, and digital forensic techniques.
• Strong understanding of MITRE ATT&CK, cyber kill chain, and threat hunting methodologies.
• Experience producing incident reports and documenting technical findings.
• Excellent analytical, troubleshooting, and communication skills.

Responsibilities

• Perform incident response activities, including triage, investigation, containment, eradication, and recovery.
• Conduct host-based forensic investigations across Windows and Linux environments.
• Analyze logs, memory, file systems, and malware to determine the scope and impact of security incidents.
• Monitor and investigate alerts from SIEM, EDR, IDS/IPS, and network monitoring tools.
• Correlate endpoint, network, and threat intelligence data to identify attack patterns and build incident timelines.
• Serve as the Incident Commander during major cybersecurity events when required.
• Analyze attacker tactics, techniques, and procedures (TTPs) and map findings to the MITRE ATT&CK framework.
• Prepare detailed incident reports, executive summaries, and technical documentation.
• Collaborate with cross-functional teams to improve detection capabilities and strengthen security controls.
• Participate in post-incident reviews and contribute to updating incident response playbooks.
• Provide on-call support for critical security incidents as needed.

Skills

Incident response

Digital forensics

Threat hunting

Analytical thinking

Communication skills

Incident reporting

On-call support

Tools

CrowdStrike

SentinelOne

Microsoft Sentinel

NetWitness

Corelight

Gravwell

Google SecOps

Job description

Fairweather, LLC seeks an experienced Cyber Incident Response Analyst to lead investigations and respond to security incidents in an onsite role across Austin and San Antonio. The position requires hands-on forensic analysis, malware assessment, and strong communication of findings to technical and non-technical stakeholders.

The candidate will triage, contain, and recover from incidents, coordinate with SOC tools and threat intel, and contribute to playbooks and post‑incident reviews.