Lead Security Analyst - DFIR

Job Summary

Leading complex investigations, the full-time Lead Security Analyst - DFIR will conduct forensic analysis across enterprise systems and respond to cybersecurity incidents while working in a flexible environment near Irving, TX or Stamford, CT.

Key responsibilities

• Lead digital forensic investigations involving cybersecurity incidents and insider threats
• Conduct forensic acquisition and analysis of endpoints, cloud workloads, and network artifacts
• Develop and maintain DFIR playbooks and standard operating procedures that meet legal standards

Required qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Digital Forensics, or related fields
• 7+ years of experience in digital forensics and incident response, with at least 2 years in a senior or lead role
• Hands-on experience with digital forensics tools and platforms such as Magnet Forensics and EnCase
• Experience with cloud forensics in AWS and Azure environments
• Strong proficiency with endpoint detection and response (EDR/XDR) and SIEM platforms