Senior Cybersecurity Forensics Analyst — DFIR & eDiscovery

Huntington National Bank; Charlotte (NC); On-site; USD 70,000 - 140,000; Full time

Job summary

Huntington National Bank is seeking an expert Cybersecurity Forensics Analyst to drive investigations and incident response using Enterprise eDiscovery tools. You will work within the DFIR team, coordinating with CSOC, Insider Threat, Legal, and HR to process digital evidence and support litigation.

The role requires analyzing evidence, preserving chain of custody, and providing reports for internal investigations. Candidates with strong tool experience and runbook discipline are preferred.

Qualifications

• Minimum 5 years in a Forensics/eDiscovery role.
• Bachelor's degree or 4+ additional years in professional forensics and/or adjacent cybersecurity experience.
• Experience with Enterprise eDiscovery/Forensics tools and/or Insider Threat monitoring tools.
• Hands-on experience implementing or operating Security Tools (SIEM, DLP, IPS, Anti Malware, Firewalls).
• Experience documenting and maintaining procedures/runbooks.
• Strong troubleshooting and problem-solving skills.
• Maintains and updates Runbooks and other support documents as appropriate.
• Comply with the organization's cybersecurity policies, procedures among colleagues, contractors, alliances, etc.

Responsibilities

• Serves as an expert for Forensics Investigations and liaises with Legal, Corporate Security, HR, and others requiring investigative/eDiscovery support.
• Advises lawyers and investigators on data relevance to a case or investigation.
• May testify in court or litigation hold as part of findings for internal investigations.
• Investigates reports of suspicious activity and determines the who/what/when/how of incidents.
• Uses corporate forensic tools to discover, process, and preserve emails and documents for litigation.
• Works with counsel, corporate security, and HR to provide reports for legal and/or investigation purposes.
• Maintains the chain of custody for evidence across devices and media.
• Uses file recovery programs to search for and restore deleted data.
• Tracks and reports metrics relevant to the forensics workload.
• Collaborates with vendors to understand product roadmaps and upgrades.
• Provides after hours on-call incident support on a 4-week rotating basis.

Skills

Forensics

eDiscovery

Incident Response

Court Testimony

Evidence Handling

Liaison with Legal

Runbooks

Education

Bachelor's degree or equivalent

Tools

OpenText EnCase

AccessData FTK

SIEM

DLP

IPS

Firewalls

Job description

Huntington National Bank is seeking an expert Cybersecurity Forensics Analyst to drive investigations and incident response using Enterprise eDiscovery tools. You will work within the DFIR team, coordinating with CSOC, Insider Threat, Legal, and HR to process digital evidence and support litigation.

The role requires analyzing evidence, preserving chain of custody, and providing reports for internal investigations. Candidates with strong tool experience and runbook discipline are preferred.