Digital Forensic Specialist

ALLTECH CONSULTING SVC INC; Troy (MI); On-site; USD 60,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled Incident Response and Digital Forensics specialist. In this dynamic role, you will leverage your expertise in SOC investigation and forensic analysis to tackle complex cyber incidents. Your responsibilities will include analyzing log files, conducting malware analysis, and preparing detailed investigation reports. The ideal candidate will possess strong technical skills, a solid educational background, and relevant certifications. Join a forward-thinking team dedicated to maintaining cybersecurity and mitigating threats in a collaborative environment where your contributions will be valued and impactful.

Qualifications

• 6+ years in SOC investigation and 3 years in Digital Forensics.
• Proficient in Incident analysis and Forensic investigation.

Responsibilities

• Conduct proactive compromise assessments and incident response.
• Prepare investigation reports and build run books for incidents.

Skills

Incident analysis

Forensic investigation

Digital forensics

File systems knowledge

Network protocols understanding

Log file analysis

Dynamic analysis

Static analysis

Malware analysis

Education

Graduate/Postgraduate

Tools

FTK Forensics

EnCase

Cellebrite

Job description

Years of experience needed –

• 6+ on SOC investigation/Incident Response and 3 Yrs. on Digital Forensics

Tools –

• FTK Forensics

Technical Skills:

• Proficient in Incident analysis and Forensic investigation
• Proven experience in digital forensics or a similar role.
• Proficiency with tools like FTK, EnCase and Cellebrite.
• Strong understanding of file systems, operating systems, and network protocols
• Perform analysis of log files including forensic analysis of system resource access
• Conduct analysis of log files, evidence, and other information to determine best methods for identifying the perpetrator(s) of a network intrusion
• Confirm what is known about an intrusion and discover new information, if possible, after identifying intrusion via dynamic analysis
• Provide technical summary of findings in accordance with established reporting procedures
• Examine recovered data for information of relevance to the issue at hand
• Perform file signature analysis

Responsibilities also include:

• Incident Response
• Incident Triage
• Proactive compromise assessment
• Remediation assistance for the entire incident lifecycle
• Malware Analysis
• Static Analysis
• Dynamic Analysis
• Sand Boxing (on-prem/Cloud)
• Detective rules creation

Forensics Analysis:

• Computer/storage media forensics
• Malware / Live Forensics
• Database Forensics
• Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise
• Performing daily analysis and investigating incidents to a triage level. Responsibility includes ensuring SLA adherence: follow up with the asset owners and ensure that the call raised is closed on time. Raise incident call based on the analysis of daily reports, real time s and monitoring dashboards.
• Prepare Investigation report for reported incidents.
• Build run books for new incidents reported or seen in customer’s network.

Education qualification:

• Graduate/Postgraduate

Behavioral Skills:

• Effective interpersonal, team building and communication skills

Certifications Needed:

• Relevant certifications