Senior Incident Response & Digital Forensics Lead

Bloomberg; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Bloomberg's Cyber Security Operations Center is seeking a Senior Incident Response & Digital Forensics Analyst to lead high‑visibility security investigations. You will analyze host, memory, and network evidence, acquire forensic images, and reconstruct attacker activity to understand impact and mitigate risk.

You will mentor teammates, contribute to tooling and playbooks, and collaborate with stakeholders across Bloomberg to improve detection and response capabilities in a globally distributed,

Qualifications

• Hands-on experience leading security incident investigations end to end, from signal to root-cause analysis.
• Experience with disk and memory forensics across Windows and Linux.

Responsibilities

• Lead technical investigations of complex security incidents and escalations.
• Establish ground truth during significant incidents and drive investigations to defensible conclusions.
• Mentor teammates and contribute to playbooks, workflows, and reusable detection coverage.

Skills

Incident response

Digital forensics

Malware analysis

OS internals

Networking

Splunk

Endpoint telemetry

Python scripting

Tools

Volatility

Memory forensics

Osquery

Sysmon

CrowdStrike RTR

Job description

Bloomberg's Cyber Security Operations Center is seeking a Senior Incident Response & Digital Forensics Analyst to lead high‑visibility security investigations. You will analyze host, memory, and network evidence, acquire forensic images, and reconstruct attacker activity to understand impact and mitigate risk.

You will mentor teammates, contribute to tooling and playbooks, and collaborate with stakeholders across Bloomberg to improve detection and response capabilities in a globally distributed,