Senior Incident Response & Digital Forensics Lead

Bloomberg; New York (NY); On-site; USD 190,000 - 260,000; Full time

Benefits offered by this job

Benefits package

Job summary

Bloomberg’s Cyber Security Operations Center seeks a Senior Incident Response & Digital Forensics Analyst to lead complex investigations, perform disk and memory forensics, and drive threat hunting and incident response activities. You will mentor analysts and help elevate detection capabilities across a global tech environment.

You will analyze host, memory, network, and log data, acquire forensic images, and investigate suspicious binaries.

Qualifications

• Lead investigations end-to-end from signal to root cause.
• Perform disk/memory forensics on Windows/Linux.
• Analyze malware using static/dynamic methods and extract observables.

Responsibilities

• Lead technical investigations for complex incidents and escalations.
• Acquire and analyze forensic images, examine binaries, reconstruct attacker activity.
• Mentor teammates, share playbooks, and improve detection coverage.

Skills

Incident response leadership

Disk & memory forensics

Malware analysis

Operating systems internals

Networking fundamentals

Threat hunting

Python scripting

Mentoring & knowledge sharing

Education

GCFA/GCFE/GREM/GNFA certifications

Tools

Splunk

Volatility

osquery

Sysmon

Carbon Black

Tanium

CrowdStrike Falcon RTR

Humio/LogScale

Zeek/Suricata/Snort/NetWitness

Job description

Bloomberg’s Cyber Security Operations Center seeks a Senior Incident Response & Digital Forensics Analyst to lead complex investigations, perform disk and memory forensics, and drive threat hunting and incident response activities. You will mentor analysts and help elevate detection capabilities across a global tech environment.

You will analyze host, memory, network, and log data, acquire forensic images, and investigate suspicious binaries.