Senior Cyber Forensic Lead: Incident Response

ShorePoint, LLC; Albuquerque (NM); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

Health insurance coverage 85%

401(k)

Continuing education

Certification maintenance & reimburse

Job summary

ShorePoint, LLC is seeking a Senior Cyber Forensic Analyst to lead advanced digital forensic examinations and incident response across enterprise environments, including government stakeholders. You will reconstruct timelines, preserve evidence with chain-of-custody, and guide containment and recovery actions.

Qualifications include a Bachelor's degree and 10+ years of relevant experience, with U.S. citizenship and ability to obtain security clearance.

Qualifications

• Bachelor's degree required; advanced degree can substitute for 6 years of experience.
• 10+ years of relevant work experience.
• Ability to translate complex requirements into actionable tasks.
• U.S. citizenship and ability to obtain security clearance.

Responsibilities

• Lead advanced digital forensic examinations across endpoints, servers, networks, cloud and logs.
• Preserve, analyze and document digital evidence with chain-of-custody.
• Reconstruct incident timelines and identify attacker activity and data exfiltration.
• Lead forensic support for complex incident response: scoping, containment, eradication, recovery.
• Conduct proactive threat-hunting using endpoint, network and security-event data.
• Produce clear reports and executive summaries for government stakeholders and ISSOs.

Skills

Digital forensics

Incident response

Threat hunting

Evidence handling

Reporting & comms

Education

Bachelor's degree

Tools

SIEM

EDR

Forensic tools

Job description

ShorePoint, LLC is seeking a Senior Cyber Forensic Analyst to lead advanced digital forensic examinations and incident response across enterprise environments, including government stakeholders. You will reconstruct timelines, preserve evidence with chain-of-custody, and guide containment and recovery actions.

Qualifications include a Bachelor's degree and 10+ years of relevant experience, with U.S. citizenship and ability to obtain security clearance.