Senior Digital Forensics Lead — Investigations & Incident Response

RXO; Charlotte (NC); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision plans

401(k) with company match

Paid time off and holidays

Employee Assistance Program

Job summary

RXO is seeking a Lead Analyst, Information Security (Forensics) to serve as the subject matter expert for digital forensics investigations and evidence preservation. The role leads complex examinations supporting cybersecurity incidents, legal matters, and compliance investigations, ensuring evidence is collected, analyzed, and documented with chain-of-custody.

It partners with Legal, HR, Compliance, and executives.

Qualifications

• Bachelor’s degree or equivalent work experience in a related field.
• 6+ years of relevant experience in digital forensics, incident response, or cybersecurity investigations.
• Experience supporting legal, HR, compliance, or regulatory investigations.

Responsibilities

• Lead digital forensic investigations involving security incidents, policy violations, litigation support, and regulatory inquiries.
• Collect, preserve, analyze, and document digital evidence from endpoints, servers, cloud platforms, mobile devices, emails, and other systems.
• Maintain chain-of-custody controls to ensure admissibility of findings.
• Conduct triage, scoping, root-cause analysis, and artifact analysis during incidents.
• Partner with Legal, HR, Compliance, Internal Audit, and business leaders to support investigations.

Skills

Digital forensics

Incident response

Cybersecurity investigations

Evidence preservation

Mentoring

Regulatory compliance

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Windows forensics

Linux forensics

Cloud forensics

eDiscovery

Job description

RXO is seeking a Lead Analyst, Information Security (Forensics) to serve as the subject matter expert for digital forensics investigations and evidence preservation. The role leads complex examinations supporting cybersecurity incidents, legal matters, and compliance investigations, ensuring evidence is collected, analyzed, and documented with chain-of-custody.

It partners with Legal, HR, Compliance, and executives.