Remote Senior Incident Response & Digital Forensics Lead

NTT Ltd.; United States; Remote; USD 140,000 - 170,000; Full time

Job summary

NTT DATA is seeking a Senior Information Security Incident Response Analyst to lead complex investigations across host, disk, memory, network, cloud, and mobile environments. The role focuses on root cause, containment guidance, and clear communication of findings to technical and executive stakeholders.

You will mentor junior responders, contribute to process improvement, and collaborate with internal teams and external partners while maintaining strong client engagement during incidents.

Qualifications

• Hands-on experience in digital forensics and incident response across host, disk, memory, network, cloud, and mobile environments.
• Experience with SIEM, EDR, IDS/IPS, packet analysis utilities, and forensic toolsets.
• Ability to analyze network traffic with Wireshark or tcpdump to distinguish normal vs. malicious behavior.
• Experience in cybersecurity consulting, DFIR services, or related security roles.

Responsibilities

• Investigates security incidents across host, disk, memory, network, cloud, and mobile forensics.
• Analyzes artifacts across Windows, Linux, macOS and reconstructs event timelines.
• Guides containment, eradication, and recovery with clear recommendations.
• Acts as senior escalation point and mentors junior analysts.
• Participates in on-call rotation to support urgent incidents.
• Completes tabletop exercises, IR readiness engagements, and environment hardening reviews.
• Identifies gaps and weaknesses and recommends risk reduction.
• Produces documentation, investigation notes, status updates, and final reports.
• Collaborates with global DFIR teams and keeps abreast of threats and methods.

Skills

Digital forensics

Incident response

Network forensics

Cloud forensics

Memory forensics

Mentoring

Stakeholder communication

Education

Bachelor’s degree in IT / CS / Cybersecurity

GIAC/GCIH/GCIA certifications

Tools

SIEM

EDR

Wireshark

tcpdump

Forensic toolsets

Job description

NTT DATA is seeking a Senior Information Security Incident Response Analyst to lead complex investigations across host, disk, memory, network, cloud, and mobile environments. The role focuses on root cause, containment guidance, and clear communication of findings to technical and executive stakeholders.

You will mentor junior responders, contribute to process improvement, and collaborate with internal teams and external partners while maintaining strong client engagement during incidents.