Senior Unix/Linux Forensics & Incident Response Engineer

Canvendor; San Jose (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Canvendor seeks a Senior/Staff Unix/Linux Infrastructure Forensics & Incident Engineer to lead investigations across Linux servers, cloud workloads, and enterprise networks. You will identify, contain, investigate, and remediate sophisticated incidents while preserving forensic evidence and building scalable detections.

Ideal candidates have 6+ years in cybersecurity and digital forensics, with strong Linux internals knowledge and experience in high‑availability environments.

Qualifications

• 6+ years of professional experience in cybersecurity, digital forensics, incident response, infrastructure security, or a related discipline.
• Strong hands-on experience with Unix/Linux operating systems and enterprise infrastructure.
• Proven experience conducting complex computer forensic investigations and security incident response.
• Understanding of Linux internals, filesystems, processes, memory, networking, authentication, and system services.
• Experience with scripting/programming languages such as Python, Bash, Perl, or PowerShell.
• Knowledge of MITRE ATT&CK and modern attacker TTPs.
• Experience in large-scale, high-availability environments.

Responsibilities

• Lead complex digital forensic investigations involving Unix/Linux servers, infrastructure, endpoints, cloud workloads, and enterprise applications.
• Perform forensic acquisition, preservation, analysis, and documentation of compromised systems.
• Investigate security incidents including credential theft, malware, rootkits, lateral movement, persistence, and insider threats.
• Develop and maintain forensic playbooks, investigation procedures, and incident response methodologies.
• Coordinate with SOC and detection engineering to convert forensic findings into detections.

Skills

Unix/Linux

Incident Response

Digital Forensics

Communication

Threat Hunting

Education

Cybersecurity/CS degree

Tools

SIEM

EDR/XDR

Volatility

KAPE

Linux forensics tools

Job description

Canvendor seeks a Senior/Staff Unix/Linux Infrastructure Forensics & Incident Engineer to lead investigations across Linux servers, cloud workloads, and enterprise networks. You will identify, contain, investigate, and remediate sophisticated incidents while preserving forensic evidence and building scalable detections.

Ideal candidates have 6+ years in cybersecurity and digital forensics, with strong Linux internals knowledge and experience in high‑availability environments.