Senior Forensics & Investigations Analyst (Remote)

Cypress HCM; Santa Clara (CA); On-site; USD 96,000 - 165,000; Full time

Job summary

Cypress HCM seeks a Senior Analyst, Investigations and Forensics on a contract-to-hire basis. The role leads deep technical investigations across endpoint, cloud, and identity forensics, delivering legally defensible findings to HR, Legal, and leadership.

The candidate will contribute to proactive tooling, AI-integrated workflows, and scalable investigative frameworks, while maintaining strict evidentiary integrity and confidentiality across sensitive matters.

Qualifications

• 7+ years of progressive experience in digital forensics, cybersecurity investigations, or a closely related discipline.
• Expertise conducting insider threat, data exfiltration, and employee misconduct investigations in enterprise environments.
• Proficiency with enterprise forensic platforms: Magnet AXIOM Cyber, Cellebrite Endpoint Collector and Endpoint Investigator, and Sumuri Recon or comparable tooling.
• Strong working knowledge of forensic imaging standards and acquisition methodologies with chain-of-custody
• Hands-on proficiency with EDR platforms - CrowdStrike Falcon - for behavioral analysis and forensic artifact review.
• Strong working knowledge of Microsoft 365 forensics: Exchange Online, Azure AD logs, and MDE.
• Experience supporting eDiscovery processes, including ESI collection and legal holds.

Responsibilities

• Lead and execute end-to-end digital forensic investigations across endpoint, cloud, email, identity, and SaaS environments.
• Conduct deep-dive analysis for insider threat, data exfiltration, IP theft, fraud, misconduct, and ethics investigations.
• Support SIRT as Advanced Forensic Tier on high-severity incidents; establish attribution and timelines.
• Perform forensic imaging and acquisition of endpoints and storage media with proper chain-of-custody.
• Develop and refine internal forensic tooling, detection playbooks, and investigative frameworks.
• Produce executive-quality investigation reports for HR, legal, and regulatory needs.

Skills

Digital forensics

Insider threat

Endpoint forensics

Cloud forensics

eDiscovery

Python scripting

Tools

Magnet AXIOM Cyber

Cellebrite Endpoint Collector

Cellebrite Endpoint Investigator

Sumuri Recon

CrowdStrike Falcon

JAMF

Intune

SCCM

Google SecOps/Chronicle

Splunk

Job description

Cypress HCM seeks a Senior Analyst, Investigations and Forensics on a contract-to-hire basis. The role leads deep technical investigations across endpoint, cloud, and identity forensics, delivering legally defensible findings to HR, Legal, and leadership.

The candidate will contribute to proactive tooling, AI-integrated workflows, and scalable investigative frameworks, while maintaining strict evidentiary integrity and confidentiality across sensitive matters.