Senior DFIR Analyst: Insider Risk & Forensics

Forensic Focus Limited; Northern, New York (KY, NY); On-site; USD 90,000 - 154,000; Full time

Job summary

Forensic Focus Limited in New York seeks a Senior Analyst within a Threat Detection and Response team focused on insider risk. You will conduct digital forensic investigations across endpoints, servers, mobile devices and cloud infrastructure, acquiring and preserving evidence under strict chain-of-custody protocols.

The role requires 3+ years in DFIR, with strong OS file system knowledge and scripting, cloud, and malware analysis skills.

Qualifications

• 3+ years in DFIR or cybersecurity.
• Strong knowledge of Windows, Linux and macOS file systems (NTFS, EXT4, APFS).
• Desirable: SQL-based data analytics, scripting, cloud experience, malware analysis.

Responsibilities

• Conduct digital forensic investigations across endpoints, servers, mobile devices and cloud infrastructure.
• Acquire and preserve evidence under strict chain-of-custody protocols.
• Analyse file system artefacts, memory dumps and network traffic.
• Produce executive-ready forensic reports with root cause analysis and remediation recommendations.

Skills

DFIR experience

Windows

Linux

macOS

Scripting (Python/Bash/PowerShell)

Cloud platforms (AWS/Azure/GCP/OCI)

Malware analysis

Job description

Forensic Focus Limited in New York seeks a Senior Analyst within a Threat Detection and Response team focused on insider risk. You will conduct digital forensic investigations across endpoints, servers, mobile devices and cloud infrastructure, acquiring and preserving evidence under strict chain-of-custody protocols.

The role requires 3+ years in DFIR, with strong OS file system knowledge and scripting, cloud, and malware analysis skills.