Senior Threat Hunter & Digital Forensics Lead

mattyno9; New York (NY); On-site; USD 190,000 - 260,000; Full time

Benefits offered by this job

401(k) + match

Medical

Dental

Vision

Short/Long term disability

Life insurance

Wellness programs

Paid holidays

Paid time off

Merit increases

Incentive compensation

Job summary

Bloomberg’s Cyber Security Operations Center (CSOC) Threat Hunting, Intelligence & Incident Response team seeks a Senior Incident Response & Digital Forensics Analyst in New York. You will lead end-to-end security investigations, analyze disk/memory forensics, malware, and attacker behavior across Windows, Linux, and macOS, while shaping forensic capabilities and detection coverage.

You will mentor others, contribute to tooling and processes, and collaborate with cross-functional teams to ensure

Qualifications

• Substantial hands-on experience leading security incident investigations end to end.
• Strong practical experience with disk and memory forensics across Windows and Linux.
• Demonstrated malware analysis experience, including static and dynamic analysis.
• Strong knowledge of operating-system internals across Windows, Linux, and macOS.
• Strong understanding of networking fundamentals: TCP/IP, DNS, routing, and network evidence analysis.
• Deep experience with enterprise search/log-analysis platforms (e.g., Splunk).
• Experience using endpoint and network telemetry to determine attacker behavior.
• Programming or scripting capability, with Python commonly used.
• Ability to investigate difficult problems independently and mentor others.
• Strong written and verbal communication skills.

Responsibilities

• Lead technical investigations of complex security incidents and escalations from initial signal to root cause.
• Analyze host, memory, network and log evidence; acquire and examine forensic images; investigate malware.
• Reconstruct attacker activity to determine what happened and the impact.
• Establish ground truth quickly during significant incidents and own the investigation.
• Mentor and uplift the analytical capability of the team through playbooks and knowledge sharing.

Skills

Incident investigations

Disk & memory forensics

Malware analysis

OS internals

Networking fundamentals

Splunk/log analysis

Endpoint telemetry/EDR

Python/ scripting

Mentoring/leadership

Communication

Tools

Splunk

Volatility

Jupyter notebooks

Git

Jira

Job description

Bloomberg’s Cyber Security Operations Center (CSOC) Threat Hunting, Intelligence & Incident Response team seeks a Senior Incident Response & Digital Forensics Analyst in New York. You will lead end-to-end security investigations, analyze disk/memory forensics, malware, and attacker behavior across Windows, Linux, and macOS, while shaping forensic capabilities and detection coverage.

You will mentor others, contribute to tooling and processes, and collaborate with cross-functional teams to ensure