Senior DFIR Analyst - Remote Incident Response & Forensics

Forensic Focus; Northern (KY); Hybrid; USD 92,000 - 154,000; Full time

Job summary

Forensic Focus seeks a Cyber Security Analyst III to lead digital forensics and incident response in a remote U.S. federal/regulatory setting. The role demands 5+ years of cybersecurity experience, strong DFIR skills, and expertise with NIST/CIS/ISO frameworks.

You will investigate incidents, coordinate containment, and support audits while mentoring junior analysts. Responsibilities include endpoint investigations, security monitoring, threat containment, and continuous process improvement

Qualifications

• Bachelor’s degree required with 5+ years of cybersecurity experience.

Responsibilities

• Conduct endpoint forensic investigations.
• Monitor and respond to security events via SIEM, SOAR, NIDS, and PCAP tools.
• Manage incident lifecycles from detection through containment and recovery.
• Contribute to audits and disaster recovery exercises.
• Drive continuous improvement of cybersecurity processes in a regulated federal environment.

Skills

Digital Forensics & Incident Response

DFIR

Analytical thinking

Mentoring junior analysts

Education

Bachelor's degree

Tools

SIEM

SOAR

NIDS

PCAP

Endpoint protection

DLP

Firewalls

Vulnerability scanning

Job description

Forensic Focus seeks a Cyber Security Analyst III to lead digital forensics and incident response in a remote U.S. federal/regulatory setting. The role demands 5+ years of cybersecurity experience, strong DFIR skills, and expertise with NIST/CIS/ISO frameworks.

You will investigate incidents, coordinate containment, and support audits while mentoring junior analysts. Responsibilities include endpoint investigations, security monitoring, threat containment, and continuous process improvement