Senior DFIR Analyst: Forensics & Incident Response Lead

TikTok USDS Joint Venture; New York (NY); On-site; USD 99,000 - 196,000; Full time

Job summary

TikTok USDS Joint Venture LLC is seeking a Senior Analyst for Forensics & Response to lead complex digital investigations across endpoints, servers, mobile devices, data platforms, and cloud infrastructure.

You will own investigations from evidence collection to incident resolution, working closely with security, legal, HR, IT, and engineering. This onsite role requires expertise in DFIR, data analytics, and regulatory compliance.

Qualifications

• 3+ years of experience in digital forensics & incident response, cybersecurity engineering, or data analytics.
• Strong understanding of Windows, Linux, and macOS file systems (NTFS, EXT4, APFS) and forensic artifacts.
• Strong report writing skills, detailing analysis, procedures performed, and findings, capable of being consumed by executive-level stakeholders.
• Strong hands‑on experience with evidence handling, chain‑of‑custody, and contemporaneous notetaking.

Responsibilities

• Perform digital forensic investigations of endpoints, servers, mobile devices, data platforms, internal systems, and cloud infrastructure.
• Identify, collect, image, and preserve physical and digital evidence in accordance with chain‑of‑custody protocols and legal standards.
• Analyze complex data queries, trace data lineage, and assess outputs for data residency and compliance issues.
• Analyze endpoints, file system artifacts, memory dumps, and network traffic to identify root cause, scope of incident, and TTPs.
• Author detailed forensic reports outlining technical findings, timeline of events, root cause analysis, and remediation recommendations.
• Assist with internal investigations, eDiscovery requests, and coordinate with legal teams or law enforcement when necessary.
• Maintain, configure, and upgrade the hardware, software, and network infrastructure of the digital forensics laboratory; ensure go‑kits and remote acquisition equipment are prepared for response scenarios.

Skills

Digital forensics

Incident response

Report writing

Evidence handling

Data analytics

Education

Bachelor’s or Master’s degree in cybersecurity engineering / computer science / digital forensics

Certifications: GCIH, GCIA, GCFE, GCFA, GREM (or equivalent)

Tools

Python

Bash

PowerShell

OCI

AWS

Azure

GCP

Job description

TikTok USDS Joint Venture LLC is seeking a Senior Analyst for Forensics & Response to lead complex digital investigations across endpoints, servers, mobile devices, data platforms, and cloud infrastructure.

You will own investigations from evidence collection to incident resolution, working closely with security, legal, HR, IT, and engineering. This onsite role requires expertise in DFIR, data analytics, and regulatory compliance.