Senior Analyst – Forensics & Response

Forensic Focus Limited; Northern, New York (KY, NY); Hybrid; USD 90,000 - 154,000; Full time

Job summary

Forensic Focus Limited in New York seeks a Senior Analyst within a Threat Detection and Response team focused on insider risk. You will conduct digital forensic investigations across endpoints, servers, mobile devices and cloud infrastructure, acquiring and preserving evidence under strict chain-of-custody protocols.

The role requires 3+ years in DFIR, with strong OS file system knowledge and scripting, cloud, and malware analysis skills.

Qualifications

• 3+ years in DFIR or cybersecurity.
• Strong knowledge of Windows, Linux and macOS file systems (NTFS, EXT4, APFS).
• Desirable: SQL-based data analytics, scripting, cloud experience, malware analysis.

Responsibilities

• Conduct digital forensic investigations across endpoints, servers, mobile devices and cloud infrastructure.
• Acquire and preserve evidence under strict chain-of-custody protocols.
• Analyse file system artefacts, memory dumps and network traffic.
• Produce executive-ready forensic reports with root cause analysis and remediation recommendations.

Skills

DFIR experience

Windows

Linux

macOS

Scripting (Python/Bash/PowerShell)

Cloud platforms (AWS/Azure/GCP/OCI)

Malware analysis

Job description

# Senior Analyst – Forensics & Response*TikTok USDS Joint Venture***New York**Onsite · Senior · Full-time### The RoleThis senior position sits within a Threat Detection and Response team focused on insider risk. Day-to-day responsibilities include conducting digital forensic investigations across endpoints, servers, mobile devices, and cloud infrastructure; acquiring and preserving evidence under strict chain-of-custody protocols; analysing file system artefacts, memory dumps, and network traffic; and producing executive-ready forensic reports with root cause analysis and remediation recommendations.### Skills & ExperienceCandidates need 3+ years in DFIR or cybersecurity, with strong knowledge of Windows, Linux, and macOS file systems (NTFS, EXT4, APFS). Desirable skills include SQL-based data analytics, Python/Bash/PowerShell scripting, cloud platform experience (AWS, Azure, GCP, OCI), and malware analysis. Relevant certifications include GCFA, GCFE, GCIH, GREM, or equivalent GIAC credentials.### Who It SuitsThis role suits an experienced DFIR professional comfortable operating in a highly regulated, compliance-driven environment and handling high-stakes insider threat investigations. Those with a background bridging technical forensics and legal support — including eDiscovery and law enforcement liaison — will find the scope particularly well matched to their skills.Typical advertised salary forDigital Forensics roles in United States:**$90,000–$154,000**(median $122,000 — from207 recent listings analysed by Forensic Focus).Compare Digital Forensics salaries in United States →Certifications mentioned:GCFA · GCFE · GREM · GCIH — find training for these on theDFIR Training Finder.Learn More/Apply