CISO Cybersecurity Forensic Analyst

What you'll do

• Conduct forensic investigations across endpoint, network, and cloud environments.
• Collect, preserve, and analyze digital evidence while maintaining a strict chain of custody.
• Support incident response activities including triage, containment, eradication, and recovery.
• Correlate forensic evidence with threat intelligence and detection signals to identify root causes.
• Analyze disk images, system logs, and recovered data to reconstruct attack timelines.
• Produce clear, defensible technical reports for both technical and non-technical stakeholders.
• Contribute to post-incident reviews and the continuous improvement of response capabilities.

What we're looking for

• Associate's Degree or College Diploma.
• Bachelor's Degree (preferred).
• 3-5 years of experience in Incident Response, SOC, and/or Digital Forensics in a global corporate environment.
• Expertise in digital forensics across endpoints, systems, and network artifacts using tools like EnCase, FTK, or Autopsy.
• Proficiency in analyzing disk images, logs, and network data to reconstruct attack timelines and identify root causes.
• Experience with EDR platforms (e.g., Crowdstrike, Microsoft Defender for Endpoint) and knowledge of cloud environments (IBM Cloud, AWS, Azure).
• Strong technical writing skills to produce clear reports for both technical and non-technical stakeholders.
• Certifications such as GCFA, CHFI, or GCIH are preferred.