Responsibilities
- Carry out advanced forensic examinations of endpoints, network traffic, and digital storage devices.
- Determine the underlying causes of security incidents using authorized tools and forensic procedures.
- Perform static and dynamic analysis of malicious software to understand its behavior and impact.
- Gather, safeguard, and evaluate digital evidence while maintaining proper chain-of-custody protocols.
- Generate detailed forensic reports, including indicators of compromise and investigative conclusions.
- Assist in responding to and resolving cybersecurity incidents with direct technical involvement when necessary.
- Help develop and refine threat intelligence products and reporting.
- Examine phishing attempts, email-based threats, and attacker techniques and procedures.
- Provide support to Security Operations Center functions with both supervisory and hands-on technical tasks.
- Work with law enforcement agencies and federal entities as required for investigations.
Work Arrangement
Remote (City/Region)
