Description

Lead digital forensic investigations and incident response efforts to identify, contain, and remediate security breaches.

This role is on-site.

Responsibilities

• Collect, process, analyze, and preserve digital evidence across desktops, laptops, mobile devices, servers, and cloud data sources.
• Perform forensic triage to determine incident scope, urgency, and potential impact.
• Investigate data breaches using traditional and cloud-specific tools to identify sources of compromise.
• Document forensic workflows, analysis, and chain of custody following industry best practices.
• Mentor team members in forensics and incident response practices.

Required Skills

• 6+ years of experience in incident response or digital forensics.
• Proficiency in host-based forensics and data breach response.
• Hands-on experience investigating and troubleshooting large, complex cloud environments (AWS, Azure, GCP).
• Practical knowledge of EnCase, FTK, X-Ways, SIFT, or Splunk.
• Ability to preserve evidence from on-premises and cloud-native data sources.
• Understanding of the forensic lifecycle and evidence acquisition.
• Experience with Cloud Security Posture Management (CSPM) or automation via scripting.

Preferred Skills

• DevSecOps experience.

Key Skills

Education

Any Gradute