Senior Forensics Analyst - Ransomware & Incident Response

Arete; Austin (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Arete is seeking a senior Forensics Analyst to lead ransomware and compromise investigations. You will work with tiger team analysts to dissect artifacts across Windows, Linux and Mac, recover deleted items, and analyze logs to identify IOCs and TTPs using MITRE ATT&CK and other frameworks.

You will draft clear narrative findings and reports for counsel and partners, and guide peers through complex analyses.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Digital Forensics, Cyber Security or related field.

Responsibilities

• Lead the Forensics analysis to support the Forensic lead on ransomware/compromise engagements.
• Analyze OS, memory, and network artifacts across Windows, Linux, Mac.
• Collaborate with SOC to map IOCs and TTPs for cases.
• Prepare concise forensics findings with a narrative timeline for counsel and partners.
• Review and draft reports per official templates; perform peer reviews.
• Deliver on the Forensic Investigations plan and manage timelines across projects.
• May perform other duties as assigned by management.

Skills

Forensics analysis

Incident response

OS Forensics

Memory forensics

PII/PHI handling

Written communication

Team leadership

Threat hunting

Problem solving

Education

Bachelor's degree in Information Security/CS/Forensics

Tools

EnCase

Axiom

FTK

X-Ways

SIFT

Splunk

Redline

Volatility

Wireshark

TCPDump

Open-source forensic tools

Job description

Arete is seeking a senior Forensics Analyst to lead ransomware and compromise investigations. You will work with tiger team analysts to dissect artifacts across Windows, Linux and Mac, recover deleted items, and analyze logs to identify IOCs and TTPs using MITRE ATT&CK and other frameworks.

You will draft clear narrative findings and reports for counsel and partners, and guide peers through complex analyses.