Description

You will investigate network intrusions and cybersecurity incidents, performing host-based and network-based forensic analysis to determine the cause and extent of breaches.

This role is on-site.

Responsibilities

• Investigate network intrusions and cybersecurity incidents using host-based and network-based forensic analysis.
• Develop new techniques and procedures to improve the digital forensics process.
• Produce written documentation that presents complex technical issues clearly.
• Manage and maintain analysis labs and forensics tools used for investigations.
• Assist the Cyber Emergency Response Team during critical incidents.

Required Skills

• Minimum 4 years of experience in Threat Management, Forensics Investigations, or Incident Response.
• Proficiency in digital forensic investigations across various platforms and operating systems.
• Knowledge of file systems, Microsoft Windows artifacts, and Linux/UNIX artifacts.
• Knowledge of forensic imaging techniques and evidence preservation standards.
• Ability to perform host-based and network-based forensic analysis.
• Experience investigating intrusions on Windows and Linux/Unix operating systems.

Preferred Skills

• Experience with forensic tools (FTK, X-Ways, SIFT, AXIOM, EnCase).
• Experience with memory analysis tools (Volatility, MemProcFS).
• Experience performing forensics collections in cloud environments (AWS, Azure, GCP).

Key Skills

Education

Any Gradute