Cybersecurity Forensics Analyst - Expert

Huntington; Columbus (OH); Vor Ort; USD 70.000 - 140.000; Vollzeit

Benefits dieser Stelle

Health insurance

Wellness program

Life insurance

Disability insurance

Retirement plan

Paid leave

Paid holidays

Paid time off

Zusammenfassung

Huntington Bank is seeking an expert Cybersecurity Forensics Analyst to operate within the DFIR team, using Enterprise eDiscovery and forensics tools to investigate incidents and support litigation.

The role collaborates with CSOC, Insider Threat, Legal, HR, and Corporate Security to ensure timely investigations, evidence handling, and post-incident reporting. This is an onsite position at Huntington Corporate locations.

Qualifikationen

• Minimum of 5 years in a Forensics/eDiscovery role.
• Bachelor's degree or 4+ years in professional forensics and/or adjacent cybersecurity experience.
• Experience with Enterprise eDiscovery/Forensics tools and/or Insider Threat monitoring tools.
• Experience with Guidance/OpenText EnCase and AccessData FTK in enterprise deployments.
• Hands on experience implementing or operating Security Tools (SIEM, DLP, IPS, Anti Malware, Firewalls).
• Experience documenting and maintaining procedures/runbooks.
• Strong troubleshooting and problem-solving skills.

Aufgaben

• Serve as an expert for Forensics Investigations and liaison with Legal, Corporate Security, HR and other areas.
• Advise lawyers and investigators on data relevance to cases or investigations.
• May testify in court or at litigation hold if required.
• Investigate reports of suspicious activity and identify who, what, when, how of incidents.
• Process emails and documents for litigation using forensic tools.
• Coordinate with counsel and security teams to provide investigative reports.
• Maintain chain of custody for evidence across devices and media.
• Track metrics related to forensics workload and upgrade roadmaps.

Kenntnisse

Forensics investigations

eDiscovery

Incident response

Legal liaison

Troubleshooting

Ausbildung

Bachelor's degree or equivalent experience

Tools

Guidance OpenText EnCase

AccessData FTK

SIEM

DLP

IPS

Firewalls

Jobbeschreibung

Description

This position is an onsite position and available to be filled at any Huntington Corporate office location (see location options on posting)

Summary:

The Cybersecurity Forensics Analyst - Expert will use Huntington's Enterprise eDiscovery and forensics tools to complete investigations and respond to Information Security incidents as appropriate. This individual will serve within the DFIR (Digital Forensics & Incident Response) team to perform forensic investigations and Computer Incident Response Team (CIRT) functions, working with other forensics analysts to ensure all incidents and investigations are promptly addressed. The role works closely with members of the Cybersecurity Operations Center (CSOC), Insider Threat team, Corporate Security, Human Resources, and Legal to conduct forensics analysis, process digital evidence in support of litigation, and respond to cybersecurity incidents.

Responsibilities Include:

• Serves as an expert for Forensics Investigations and acts as a liaison for Legal, Corporate Security, Human Resources, and/or other areas requiring investigative/eDiscovery assistance.
• Advises lawyers and investigators on the relevance of data to a case or investigation.
• May testify in court or litigation hold as part of findings for internal investigation, if required.
• Investigates reports of suspicious activity, analyzing evidence to determine the “who, what, when, and how” aspects of the incident.
• Uses corporate forensic tools and investigative methods to discover, process, and preserve emails and documents that may be needed for litigation. Electronic data to be discovered may include Internet use history reports, user created data, images, and other files.
• Works with counsel (internal and external), corporate security, and human resources to provide reports as requested for legal and/or investigation purposes.
• Maintains the chain of custody for evidence used in crimes and/or incidents, including computers, thumb drives, CDs, DVDs, backup tapes, smartphones, tablets, and cameras.
• Uses file recovery programs to search for and restore deleted data.
• Tracks and reports on metrics pertinent to the forensics workload.
• Works with vendors to understand product roadmaps and plan for upgrades.
• Provide after hours on-call incident support on a 4-week rotating basis (subject to change).

Basic Qualifications:

• Minimum of 5 years in a Forensics/eDiscovery role.
• Bachelor's degree or 4+ additional years in professional forensics and/or adjacent cybersecurity experience.

Preferred Qualifications:

• Experience working with Enterprise eDiscovery/Forensics tools and/or Insider Threat monitoring tools.
• Experience with Guidance/OpenText Enterprise EnCase solution, Access Data Forensics Took Kit, or similar solutions in an enterprise-wide deployment a plus;
  • hands on experience implementing or operating Security Tools (SIEM, DLP, IPS, Anti Malware, Firewalls)
• Experience documenting and maintaining procedures/runbooks
• Strong troubleshooting and problem-solving skills.
• Review technical and procedural documentation for systems and solutions to ensure completeness and accuracy.
• Maintains and updates Runbooks and other support documents as appropriate.
• Provides input to architecture and technology teams on tools, processes, and requirements for forensics investigations/eDiscovery matters.
• Maintains current knowledge of hardware, software and network technology and recommends modifications as required.
• Comply with the organization's cybersecurity policies, procedures among colleagues, contractors, alliances, etc.

Exempt Status: (Yes = not eligible for overtime pay) (No = eligible for overtime pay)

Workplace Type:

Our Approach to Office Workplace Type

Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Compensation Range: $70,000 - $140,000 Annual Salary

The compensation range represents the anticipatedlow and high end of the base compensation range for this position. Actual compensation will vary based on various factors including but not limited to location, experience, and education. Colleagues in this position are also eligible to participate in an applicable incentive compensation plan. In addition, Huntington provides a variety of benefits to colleagues, including health insurance coverage, wellness program, life and disability insurance, retirement savings plan, paid leave programs, paid holidays and paid time off (PTO).

Huntington is an Equal Opportunity Employer.

Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details.