Senior Incident Response & Digital Forensics Analyst

Forensic Focus; New York (NY); On-site; USD 190,000 - 260,000; Full time

Job summary

Bloomberg in New York, NY is seeking a Senior Incident Response & Digital Forensics Analyst to lead investigations into complex security incidents onsite. You will analyze host, memory, network and log evidence, acquire forensic images, and examine suspicious binaries to reconstruct attacker activity.

You will mentor junior analysts, improve playbooks and tooling, and help build durable detection and investigative capabilities within a large enterprise.

Qualifications

• Hands-on disk and memory forensics across Windows and Linux.
• Malware analysis (static/dynamic) experience.
• Strong OS internals and networking knowledge.
• Experience with Splunk is required.

Responsibilities

• Lead technical investigations into complex security incidents.
• Analyse host, memory, network and log evidence to reconstruct attacker activity.
• Acquire and examine forensic images, investigate suspicious binaries.
• Mentor junior analysts and improve playbooks and tooling.

Skills

Disk forensics

Memory forensics

Malware analysis

OS internals

Networking knowledge

Splunk

Volatility

Cloud forensics

CrowdStrike Falcon RTR

EDR tools

Python scripting

Tools

Splunk

Volatility

CrowdStrike Falcon RTR

EDR tools

Job description

\" \" Senior Incident Response & Digital Forensics Analyst# Senior Incident Response & Digital Forensics Analyst*Bloomberg***New York, NY**Onsite · Senior · Full-time · $190,000.00/yr - $260,000.00/yr### The RoleYou lead technical investigations into Bloomberg's most complex security incidents, analysing host, memory, network and log evidence to reconstruct attacker activity. You acquire and examine forensic images, investigate suspicious binaries, establish ground truth during major incidents, and mentor junior analysts while improving playbooks and tooling.### Skills & ExperienceRequires hands-on disk and memory forensics across Windows and Linux, malware analysis (static/dynamic), strong OS internals and networking knowledge, and experience with Splunk. Familiarity with Volatility, cloud forensics (AWS/Azure/GCP), CrowdStrike Falcon RTR, EDR tools, and scripting (Python) is beneficial.### Who It SuitsSuited to a senior investigator with substantial incident-response and forensic experience who enjoys solving ambiguous technical problems, mentoring teammates, and building durable detection and investigative capability within a large enterprise environment.Typical advertised salary forIncident Response roles in United States:**$123,000-$179,000**(median $149,000 - from159 recent listings analysed by Forensic Focus).