Cybersecurity Forensic Analyst - Incident Response & Forensics

Forensic Focus; Austin, Northern (TX, KY); Hybrid; USD 98,000 - 182,000; Full time

Job summary

Forensic Focus seeks a Cybersecurity Forensic Analyst to join our team supporting IBM CISO initiatives in Austin, TX. You will conduct end-to-end investigations across endpoints, networks and cloud environments, delivering defensible reports for technical and executive audiences.

The ideal candidate has expert digital forensics experience with EnCase, FTK, Autopsy, X-Ways or Axiom, strong EDR/SIEM skills, and proficiency in Python or PowerShell. onsite role with a competitive salary.

Qualifications

• Strong digital forensics expertise with hands-on experience using EnCase, FTK, Autopsy, X-Ways and Axiom.
• Proficient with EDR platforms such as CrowdStrike and Microsoft Defender, plus SIEM correlation.
• Scripting ability in Python or PowerShell is advantageous; exposure to memory forensics.

Responsibilities

• Conduct end-to-end forensic investigations across endpoint, network, and cloud environments.
• Triage security incidents, reconstruct attack timelines and identify root cause.
• Produce defensible reports for technical and executive audiences.

Skills

Digital forensics

IR experience

Communication with stakeholders

Tools

EnCase

FTK

Autopsy

X-Ways

Axiom

CrowdStrike

Microsoft Defender

SIEM

Python

PowerShell

Memory forensics

Job description

Forensic Focus seeks a Cybersecurity Forensic Analyst to join our team supporting IBM CISO initiatives in Austin, TX. You will conduct end-to-end investigations across endpoints, networks and cloud environments, delivering defensible reports for technical and executive audiences.

The ideal candidate has expert digital forensics experience with EnCase, FTK, Autopsy, X-Ways or Axiom, strong EDR/SIEM skills, and proficiency in Python or PowerShell. onsite role with a competitive salary.