Lead DFIR Analyst - Hybrid/Remote Options

Gartner; Dolphin Cove (CT); Hybride; USD 94 000 - 134 000; Plein temps

Avantages offerts par ce poste

Health insurance

401K with match

PTO + holidays

Résumé du poste

Gartner IT seeks a Lead DFIR Analyst to direct complex investigations across enterprise systems, conducting forensic analysis and guiding the response to cybersecurity incidents. You’ll communicate findings to both technical and non-technical stakeholders and collaborate with Legal, HR, Privacy, and Compliance teams.

Strong DFIR expertise, evidence handling, and the ability to mentor junior investigators are essential.

Qualifications

• Bachelor's degree or equivalent practical experience in CS, Cybersecurity, or digital forensics.
• 7+ years in digital forensics/IR with 2+ years in senior/lead roles.
• Experience with scripting to automate forensic workflows.

Responsabilités

• Lead digital forensic investigations involving cybersecurity incidents and regulatory inquiries.
• Perform forensic acquisition and analysis of endpoints, cloud workloads, and network artifacts.
• Develop and maintain DFIR playbooks and SOPs that meet evidentiary standards.
• Perform advanced log analysis to establish timelines and root cause.
• Develop automation and tooling to improve investigative efficiency and evidence collection.

Connaissances

Python scripting

Investigation leadership

Clear communicatation

Formation

Bachelor's degree in Computer Science or related field

Outils

Magnet Forensics

EnCase

Volatility

FTK

KAPE

Velociraptor

Description du poste

Gartner IT seeks a Lead DFIR Analyst to direct complex investigations across enterprise systems, conducting forensic analysis and guiding the response to cybersecurity incidents. You’ll communicate findings to both technical and non-technical stakeholders and collaborate with Legal, HR, Privacy, and Compliance teams.

Strong DFIR expertise, evidence handling, and the ability to mentor junior investigators are essential.