Hybrid Cyber Forensics Analyst & Threat Hunter

Gunnison; Alexandria (VA); Hybrid; USD 125,000 - 145,000; Full time

Benefits offered by this job

401(k) employer match

Medical, Dental & Vision

Professional development funds

Paid holidays

Flexible time off

Job summary

Gunnison is seeking a skilled digital forensics and incident response professional to join our security operations. The role focuses on investigations, threat hunting, malware analysis, and proactive defense to strengthen enterprise security across enterprise infrastructure.

The candidate will work with security operations, incident response, and engineering teams to enhance detection capabilities, produce detailed reports, and maintain SOPs.

Qualifications

• 5+ years digital forensics experience (Windows, Linux, macOS)
• Experience with disk duplication, mobile forensics, malware analysis, and forensic toolsets
• Experience with AWS, Azure, M365, CloudTrail, IAM logs, EDR, SIEM, packet capture
• Ability to investigate Virtual Machines, CloudTrail, IAM logs
• Clearance or ability to obtain a Public Trust is implied by employer requirements

Responsibilities

• Perform network and media digital forensic investigations to support cybersecurity incident response, threat analysis, and enterprise security operations.
• Conduct advanced threat hunting activities to identify malicious activity, IOCS, and persistent threats.
• Utilize forensic tools and procedures to investigate cybersecurity events and incidents.
• Analyze malware, suspicious files, network traffic, and compromised systems to determine attack vectors and remediation actions.
• Execute proactive defense through IOC sweeps, host interrogation, and ongoing threat hunting.
• Prepare forensic and incident response reports documenting findings, root cause, remediation actions, and lessons learned.
• Develop and update SOPs for forensic analysis, malware analysis, and threat hunting.
• Coordinate insider threat investigations and preserve digital evidence according to requirements.
• Produce status reports for cybersecurity leadership and stakeholders.
• Collaborate with security operations, incident response, and engineering teams to strengthen detection and response capabilities.

Skills

Digital forensics

Threat hunting

Incident response

Malware analysis

Security monitoring

Tools

EDR tools

SIEM

Cloud logs (AWS/Azure)

Forensic tooling (EnCase/FTK)

Job description

Gunnison is seeking a skilled digital forensics and incident response professional to join our security operations. The role focuses on investigations, threat hunting, malware analysis, and proactive defense to strengthen enterprise security across enterprise infrastructure.

The candidate will work with security operations, incident response, and engineering teams to enhance detection capabilities, produce detailed reports, and maintain SOPs.