Cybersecurity Forensics Analyst - Expert

Huntington Bank; Columbus (OH); On-site; USD 70,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Wellness program

Life insurance

Disability insurance

Retirement plan

Paid leave

Paid holidays

PTO

Incentive plan

Job summary

Huntington Bank is seeking a Forensics Analyst - Expert within its DFIR team to support information security incident investigations and responses using enterprise eDiscovery and forensics capabilities. The role also supports CIRT functions and coordinates with CSOC, Insider Threat, Corporate Security, HR, and Legal to analyze digital evidence and assist with litigation-related needs.

As the primary forensics investigations expert, you will serve as a liaison to Legal and other stakeholders,

Qualifications

• Minimum 5 years in a Forensics/eDiscovery role.
• Bachelor’s degree, or 4+ additional years in professional forensics and/or adjacent cybersecurity experience.

Responsibilities

• Act as an expert for Forensics Investigations and liaison to Legal, Corporate Security, HR, and related stakeholders.
• Advise lawyers and investigators on data relevance to investigations and case needs.
• Support litigation activities, including potential testimony and litigation hold participation.
• Investigate reports of suspicious activity by analyzing evidence to determine incident specifics.
• Use forensic tools to discover, process, and preserve emails and documents for litigation.
• Collaborate with counsel and internal teams to provide requested reports for legal purposes.
• Maintain chain of custody for evidence used in crimes and incidents.
• Use file recovery programs to search for and restore deleted data.
• Track and report metrics relevant to forensics workload.
• Provide after-hours on-call incident support on a 4-week rotating basis.

Skills

Forensics/eDiscovery

Incident investigations

Legal coordination

Chain of custody

Evidence analysis

Testimony preparation

Education

Bachelor's degree

Tools

Guidance/OpenText EnCase

AccessData Forensic Toolkit

SIEM

DLP

Firewalls

Job description

The Cybersecurity Forensics Analyst - Expert within Huntington Bank’s DFIR team supports Information Security incident investigations and responses using enterprise eDiscovery and forensics capabilities. This role also supports CIRT functions and coordinates closely with CSOC, Insider Threat, Corporate Security, Human Resources, and Legal to analyze digital evidence and assist with litigation-related needs.

Role Focus

Serve as a forensics investigations expert and point of contact for Legal, Corporate Security, Human Resources, and other groups that require investigative and eDiscovery support. Analyze incident evidence to clarify the “who, what, when, and how,” and deliver reports aligned to legal and investigation requests.

Key Responsibilities

• Act as an expert for Forensics Investigations and serve as a liaison to Legal, Corporate Security, Human Resources, and related stakeholders.
• Advise lawyers and investigators on the relevance of data to investigations and case needs.
• Support litigation activities as required, including potential testimony and participation in litigation hold as part of internal investigation findings.
• Investigate reports of suspicious activity by analyzing evidence to determine incident specifics across “who, what, when, and how.”
• Use corporate forensic tools and investigative methods to discover, process, and preserve emails and documents potentially needed for litigation.
• Collaborate with internal and external counsel, Corporate Security, and Human Resources to provide requested reports for legal and investigation purposes.
• Maintain chain of custody for evidence used in crimes and/or incidents, including computers, thumb drives, CDs, DVDs, backup tapes, smartphones, tablets, and cameras.
• Use file recovery programs to search for and restore deleted data.
• Track and report metrics relevant to the forensics workload.
• Work with vendors to understand product roadmaps and support upgrade planning.
• Provide after-hours on-call incident support on a 4-week rotating basis (subject to change).

Required Qualifications

• Minimum 5 years in a Forensics/eDiscovery role.
• Bachelor’s degree, or 4+ additional years in professional forensics and/or adjacent cybersecurity experience.

Technologies

• Enterprise eDiscovery
• Guidance/OpenText Enterprise EnCase solution
• Access Data Forensics Took Kit
• SIEM
• DLP
• IPS
• Anti Malware
• Firewalls

Preferred Qualifications

• Experience using Enterprise eDiscovery/Forensics tools and/or Insider Threat monitoring tools.
• Experience with Guidance/OpenText Enterprise EnCase solution, Access Data Forensics Took Kit, or similar solutions in an enterprise-wide deployment.
• Hands-on experience implementing or operating security tools including SIEM, DLP, IPS, Anti Malware, and Firewalls.
• Ability to document and maintain procedures/runbooks.
• Strong troubleshooting and problem-solving skills.
• Experience reviewing technical and procedural documentation to ensure completeness and accuracy.
• Ability to maintain and update runbooks and other support documents.
• Provide input to architecture and technology teams on tools, processes, and requirements for forensics investigations and eDiscovery matters.
• Maintain current knowledge of hardware, software, and network technology and recommend modifications as required.
• Comply with the organization’s cybersecurity policies and procedures for colleagues, contractors, alliances, and related partners.

Compensation and Employment Details

• Location: Columbus, OH (onsite)
• Salary: USD 70,000 - 140,000 per year
• Exempt status: Yes
• Workplace type: Office

Benefits

• Health insurance coverage
• Wellness program
• Life and disability insurance
• Retirement savings plan
• Paid leave programs
• Paid holidays
• Paid time off (PTO)
• Eligible to participate in an applicable incentive compensation plan