Security Analyst III (Digital Forensics)

INSPYR Solutions; Spring (TX); Hybrid; USD 110,000 - 140,000; Part time

Benefits offered by this job

Comprehensive medical benefits

Retirement plan

Job summary

INSPYR Solutions is seeking a Security Analyst III to lead advanced threat investigations within a 24/7 global SOC. The role combines hands-on DFIR, malware analysis, evidence handling, and end-to-end incident response ownership.

You will mentor junior analysts, coordinate across security and infrastructure teams, and drive improvements in detections and response capabilities. Hybrid work in Spring, TX supports Tues-Thurs onsite and Mon/Fri remote.

Qualifications

• 8+ years of cybersecurity experience in Security Operations, Incident Response, or DFIR.
• Hands-on digital forensics and malware analysis experience.
• Experience owning major cybersecurity incidents end-to-end: detection, investigation, containment, eradication, recovery, root-cause analysis.
• Strong evidence handling and chain-of-custody knowledge.
• Experience with Windows environments, endpoints, and enterprise systems.
• Proficient in SIEM and monitoring platforms (Splunk, Microsoft Sentinel) and EDR/XDR.

Responsibilities

• Lead hands-on investigation and response for complex, high-severity cybersecurity incidents.
• Perform digital forensic analysis of endpoints, systems, files, and artifacts to identify attack vectors and impact.
• Conduct malware analysis and reverse engineering to determine behavior and IOCs.
• Preserve and document evidence with proper chain of custody.
• Drive containment, eradication, recovery, and root-cause analysis; act on technical actions.
• Coordinate major incident responses across security and infrastructure teams.
• Mentor junior SOC analysts and provide escalation support.
• Improve detection capabilities and incident response processes.

Skills

Digital Forensics

Incident Response

Threat Hunting

Malware Analysis

Evidence Handling

Communication

DFIR

Tools

Splunk

Microsoft Sentinel

EDR/XDR

Job description

Title:

Title: Security Analyst III

Location: Hybrid in Spring, TX, 77389 (Tues-Thurs onsite | Mon/Fri remote)

Duration: Contract-to-hire

Work Requirements: US Citizens, GC Holders, or Authorized to Work in the U.S.

Key Skills Required:

• Candidates must have experience in Digital Forensics and complex investigations
• Strong skills in incident response are required

Overview

The Security Analyst III serves as a senior, hands-on technical resource within Security Operations, responsible for advanced threat investigation, digital forensics, malware analysis, and end-to-end incident response. This individual will take ownership of complex and high-severity security incidents, driving investigations from initial detection through containment, eradication, recovery, and root-cause analysis. This role requires deep technical expertise in digital forensics and incident response (DFIR), including malware analysis/reverse engineering, evidence preservation, and maintaining chain of custody during investigations. The Security Analyst III also serves as an escalation point and mentor within the SOC and supports a 24/7/365 global environment through an on-call rotation.

Key Responsibilities

• Lead hands-on investigation and response for complex and high-severity cybersecurity incidents.
• Perform digital forensic analysis of compromised endpoints, systems, files, and other artifacts to determine attack vectors, scope, root cause, and impact.
• Perform malware analysis and reverse engineering to understand malicious behavior, indicators of compromise (IOCs), persistence techniques, and potential impact.
• Collect, preserve, document, and handle forensic evidence while maintaining chain of custody throughout investigations.
• Drive incidents through containment, eradication, recovery, and root-cause analysis, taking direct technical action when necessary rather than simply escalating incidents.
• Support and/or run major incident response, coordinating technical investigation and remediation activities across security and infrastructure teams.
• Perform advanced threat hunting and investigation using SIEM, EDR/XDR, threat intelligence, network data, and other security telemetry.
• Tune and optimize SIEM detections, alerts, dashboards, and security tooling to improve detection accuracy and response capabilities.
• Present findings from threat analysis, forensic investigations, and major incidents to technical and non-technical stakeholders.
• Create and maintain incident response procedures, investigation documentation, playbooks, data flows, and technical diagrams.
• Support cybersecurity system upgrades, new SOC technologies, Disaster Recovery planning, and change management.
• Act as a senior escalation point and mentor to junior SOC/security analysts.
• Drive continuous improvement across security tools, incident response processes, and detection capabilities.

Required Skills & Experience

• 8+ years of cybersecurity experience, with significant hands-on experience in Security Operations, Incident Response, or DFIR.
• Demonstrated experience owning major cybersecurity incidents from detection/investigation through containment, eradication, recovery, and root-cause analysis.
• Hands-on digital forensics experience, including acquisition and analysis of system/endpoint artifacts and preservation of forensic evidence.
• Hands-on malware analysis experience, including the ability to analyze and reverse engineer malicious files/code to determine behavior and indicators of compromise.
• Strong understanding of forensic evidence handling and chain-of-custody requirements.
• Experience investigating compromised Windows environments, endpoints, networks, and enterprise systems.
• Advanced threat detection, threat hunting, forensic investigation, and threat intelligence capabilities.
• Hands-on experience with SIEM and security monitoring platforms such as Splunk and Microsoft Sentinel, as well as EDR/XDR technologies.
• Ability to independently investigate complex incidents, determine appropriate containment actions, and drive incidents toward resolution.
• Experience serving as a senior SOC escalation point and mentoring less-experienced analysts.
• Strong written and verbal communication skills, including presenting complex incident findings to technical teams and leadership.

Our benefits package includes:

• Comprehensive medical benefits
• Competitive pay, 401(k)
• Retirement plan
• ...and much more!

About INSPYR Solutions:

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.