Senior Cyber Forensics Analyst

Arete Research Services LLP; United States; On-site; USD 90,000 - 140,000; Full time

Job summary

Arete Incident Response is seeking a skilled Forensics Analyst to support investigations into ransomware and compromises. You will conduct cross-platform forensics, analyze OS and memory artifacts, and review security logs to identify IOCs and TTPs.

You will work with the SOC to map findings to MITRE ATT&CK and Craft detailed narrative reports for counsel and partners. The role requires strong communication skills and experience leading analyst teams, with a focus on delivering clear, concise

Qualifications

• Bachelor's degree in Information Security, Computer Science, Digital Forensics, Cyber Security or related field with 4+ years incident response or digital forensics experience; or Master’s degree with 3+ years related experience
• Possess two or more certifications: Security+, Network+, SANS GCED, GCIH, GCFE, GCFA, CEH, CHFI, EnCe

Responsibilities

• Leads the Forensics analysis to support the Forensic lead on engagements for Ransomware/compromise investigations.
• Performs forensic analysis of artifacts across Windows, Linux, Mac, and RAM/memory; recovers deleted items
• Analyzes logs and events: Windows Event logs, Unified Audit Logs, Firewall logs, VPN logs
• Leverages EDR data with SOC to identify IOCs or TTPs for variants
• Prepares clear narrative findings and timelines for audiences
• Develops attack maps using MITRE ATT&CK and Cyber Kill Chain
• Drafts and peer-reviews incident/investigation reports
• Delivers on the Forensic Investigations plan and timelines
• Performs other duties as assigned

Skills

Forensics analysis

Memory forensics

OS forensics

NSM & log analysis

PII/PHI handling

Cyber insurance investigations

Technical reporting

Team leadership

Communication skills

Education

Bachelor’s degree in Information Security or related field

Master’s degree in related field

Tools

EnCase

Axiom

FTK

X-Ways

SIFT

Splunk

Volatility

Wireshark

TCPDump

Job description

Arete Incident Response is seeking a skilled Forensics Analyst to support investigations into ransomware and compromises. You will conduct cross-platform forensics, analyze OS and memory artifacts, and review security logs to identify IOCs and TTPs.

You will work with the SOC to map findings to MITRE ATT&CK and Craft detailed narrative reports for counsel and partners. The role requires strong communication skills and experience leading analyst teams, with a focus on delivering clear, concise