Remote Cybersecurity Incident Response & Forensics Expert

Softthink Solutions; Washington (District of Columbia); Remote; USD 140,000 - 190,000; Full time

Job summary

Softthink Solutions is seeking an experienced Cybersecurity Incident Response & Digital Forensics Specialist to support time-sensitive investigations in federal IT environments. You will analyze logs from SIEM/EDR, preserve evidence, and implement containment strategies with a focus on IOCs, cloud security, and NIST guidelines.

The role requires handling rapid triage, forensic analysis, and collaboration with federal teams. Remote work is supported for eligible US candidates.

Qualifications

• 8+ years of professional experience in cybersecurity, information security, or related technical disciplines.

Responsibilities

• Conduct rapid cybersecurity incident triage, forensic investigations, and security assessments to identify exploitation and system compromise.
• Investigate vulnerabilities in the KEV Catalog and assess potential exploitation across enterprise IT environments.
• Analyze SIEM, EDR, endpoint, network, application, authentication, and cloud logs to identify suspicious activity and IOCs.
• Perform forensic investigations to identify persistence, privilege escalation, lateral movement, and data exposure.
• Collect, preserve, and analyze digital evidence following NIST SP 800-86 and standard practices.
• Develop incident response plans and containment, eradication, and recovery strategies.
• Collaborate with cybersecurity teams, admins, cloud engineers, and stakeholders to resolve incidents.
• Escalate confirmed or suspected compromises and provide actionable recommendations.
• Prepare forensic reports, timelines, technical findings, and remediation recommendations.
• Support rapid response activities including acknowledgments, triage, status updates, and closeout documentation.
• Maintain evidence logs and chain-of-custody.
• Ensure activities align with federal requirements, NIST guidance, and security policies.

Skills

Incident response

Digital forensics

Security logs analysis

Windows & Linux

NIST standards

CISA KEV Catalog

Threat assessment

Communication

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Splunk

Microsoft Sentinel

Job description

Softthink Solutions is seeking an experienced Cybersecurity Incident Response & Digital Forensics Specialist to support time-sensitive investigations in federal IT environments. You will analyze logs from SIEM/EDR, preserve evidence, and implement containment strategies with a focus on IOCs, cloud security, and NIST guidelines.

The role requires handling rapid triage, forensic analysis, and collaboration with federal teams. Remote work is supported for eligible US candidates.