Cybersecurity Forensics Analyst – Expert

Huntington National Bank; Charlotte (NC); On-site; USD 110,000 - 140,000; Full time

Job summary

Forensic Focus is seeking an experienced forensic analyst to execute digital investigations and incident response within a corporate DFIR team. You will collect and analyse evidence, preserve chain of custody, and support eDiscovery requests from legal, HR and security stakeholders.

The role involves cross-functional communication, on-call rotations, and occasional testimony in investigations. A strong background in forensics and eDiscovery is essential.

Qualifications

• Five+ years in forensics or eDiscovery.
• Experience with EnCase or FTK.
• Familiarity with SIEM, DLP, and IPS.
• Strong documentation, investigative and analytical abilities.

Responsibilities

• Conduct digital forensic investigations and incident response within a corporate DFIR team.
• Collect and analyse evidence while maintaining chain of custody.
• Support eDiscovery requests and liaise with legal, HR and security on investigations.
• Occasionally provide testimony as required.

Skills

Forensics

eDiscovery

EnCase

FTK

File Recovery

SIEM

DLP

IPS

Documentation

Investigation

Analysis

Tools

EnCase

FTK

eDiscovery Tools

Job description

The Role

This position performs digital forensic investigations and incident response within a corporate DFIR team, collecting and analysing evidence, maintaining chain of custody, supporting eDiscovery requests, and liaising with legal, HR and security teams on investigations, occasionally providing testimony.

Skills & Experience

Requires five-plus years in forensics or eDiscovery, experience with enterprise forensic tools such as EnCase or FTK, file recovery techniques, security tool familiarity (SIEM, DLP, IPS), documentation skills, and strong investigative and analytical ability.

Who It Suits

Suited to an experienced forensic analyst comfortable working across legal, HR and security stakeholders, handling litigation-related evidence, and participating in on-call incident response rotations within a corporate environment.