Senior Cybersecurity Forensic Investigator Incident Response

AT&T; Charlotte (NC); On-site; USD 128,000 - 193,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement

Paid Time Off and Holidays

Paid Parental Leave

Adoption Reimbursement

Life and AD&D Insurance

Employee Discounts

Job summary

AT&T is seeking a Senior Cybersecurity Digital Forensic Investigator to lead investigations across the enterprise. You will analyze evidence, reconstruct timelines, determine scope and impact, and communicate findings to technical and non-technical audiences.

The role supports endpoint, cloud, identity, and network investigations and participates in on-call rotations. A strong foundation in threat culture and AI-assisted analysis is beneficial.

Qualifications

• Bachelor’s degree in Computer Science or Cybersecurity required.
• Minimum 3 years of experience in Digital Forensics, Incident Response, or related cybersecurity disciplines.
• Ability to communicate findings to both technical and non-technical audiences.

Responsibilities

• Conduct digital forensic investigations associated with cybersecurity incidents and suspicious activity.
• Collect, preserve, process, and analyze digital evidence while maintaining chain of custody.
• Perform endpoint, memory, log, cloud, network, and live-response forensic analysis.
• Determine attack scope, affected assets, root cause, and extent of compromise.
• Reconstruct timelines using forensic artifacts, telemetry, and logs.
• Produce detailed technical reports and executive summaries documenting findings.

Skills

Digital Forensics

Incident Response

Threat Intelligence

Malware Analysis Fundamentals

Cloud Forensics

Scripting/Automation

Generative AI in security

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SIEM Platforms

EDR Platforms

Public Cloud (AWS/Azure)

Python scripting

Job description

AT&T is seeking a Senior Cybersecurity Digital Forensic Investigator to lead investigations across the enterprise. You will analyze evidence, reconstruct timelines, determine scope and impact, and communicate findings to technical and non-technical audiences.

The role supports endpoint, cloud, identity, and network investigations and participates in on-call rotations. A strong foundation in threat culture and AI-assisted analysis is beneficial.