Senior Cyber Defense Forensic Analyst

The Senior Cyber Defense Forensic Analyst would be a member of the Cyber Threat Intelligence and Investigations team. The analyst will perform digital forensic examinations in support of investigations by the Cyber Security Operations Center Incident Response Team Corporate Human Resources Department Corporate Legal Department Corporate Physical Security Other entities as determined by the CIO.

Primary Duties and Accountabilities

• Perform digital forensic examinations/investigations

• Communicate in an easy-to-understand manner to a non-technical audience the examination/investigation findings to appropriate individuals/business units

• Create and document findings in a professional manner and use incident management system to track work progress.

• Assist as needed with corporate security HR and Ethics with interviewing users by providing technical expertise.

• Create/Revise/Maintain procedural documentation

• Write variety of written products based on analysis of data

• Researches and maintains proficiency in tools techniques countermeasures and trends in computer network vulnerabilities data hiding and network security and encryption

• Assists in identifying investigating and analyzing computer network intrusions Acceptable Use Violations

• Capable of deep-dive analysis of malicious software packages across a variety of target systems

• Cross-collaboration across various Cyber Defense teams

Minimum Qualifications

• Bachelor’s degree in digital Forensics or a related 4-year technical degree OR 10+ years of work experience in this field

• Minimum 5 years’ experience conducting digital forensic examinations and in one or more of: computer evidence seizure data recovery; intrusion analysis and incident response; network protocols network devices multiple operating systems secure architectures malware analysis.

• Familiarity with forensic artifacts from various operating systems

• Understanding of corporate network infrastructure

• Knowledge of Forensic Tools: EnCase Magnet Axiom Cellebrite Microsoft eDiscovery

• Certifications desired: Guidance Software EnCE IACIS CFCE GIAC GCFA GIAC GCFE or GIAC GREM

• Cybercrime investigative experience and an understanding of the investigation life cycle