Cybersecurity Incident Response & Digital Forensics Specialist

Forensic Focus; United States; Teletrabalho; USD 120 000 - 180 000; Tempo integral

Resumo da oferta

Forensic Focus seeks a senior incident responder/forensic analyst to lead investigations on federal IT systems. You will triage incidents, conduct forensic analysis and log reviews to detect persistence and lateral movement, and prepare detailed reports with remediation guidance.

You will also ensure evidence collection and chain-of-custody documentation in high-stakes environments. The role requires extensive experience in cybersecurity within federal standards, strong knowledge of incident

Qualificações

• 8+ years in cybersecurity
• 5+ years in incident response or forensics
• Knowledge of NIST SP 800-61/800-86
• Knowledge of CISA KEV Catalog
• Experience with SIEM/EDR tools (Splunk, CrowdStrike, Defender)
• GCIH certification preferred

Responsabilidades

• Manage time-sensitive security incidents across federal IT systems.
• Perform triage, forensic investigation and log analysis to uncover persistence and lateral movement.
• Collect evidence, maintain chain-of-custody, and produce investigation reports and remediation guidance.

Conhecimentos

Incident response

Forensics

Cybersecurity

Federal compliance

Formação académica

GCIH certification

Ferramentas

Splunk

CrowdStrike

Microsoft Defender

SIEM/EDR

Descrição da oferta de emprego

The Role

This role manages time-sensitive security incidents across federal IT systems, performing triage, forensic investigation and log analysis to uncover persistence, lateral movement and data exposure. It involves evidence collection, chain-of-custody documentation, and producing investigation reports and remediation guidance.

Skills & Experience

Requires 8+ years in cybersecurity with 5+ years in incident response or forensics, knowledge of NIST SP 800-61/800-86, CISA KEV Catalog, SIEM/EDR tools like Splunk, CrowdStrike, and Microsoft Defender, plus GCIH certification preferred.

Who It Suits

Suited to experienced incident responders and forensic analysts comfortable working within federal compliance frameworks, who can work remotely and respond quickly to urgent, high-stakes security investigations.