Senior Digital Forensics and Incident Response Engineer

What you'll do

• Lead investigations into identity theft, account takeovers, and associated fraud activities.
• Conduct forensic analysis to determine attack methods and identify root causes of security incidents.
• Develop and implement automated workflows and detection capabilities to scale identity fraud response.
• Assess and correlate incident data to identify vulnerabilities and provide remediation recommendations.
• Manage a real-time forensic capability to collect and analyze data correlations for leadership reports.
• Support enterprise-wide cyber investigations and forensic analysis across the organization.
• Influence department strategy through technical leadership and operational excellence initiatives.
• Participate in a mandatory on-call rotation to support continuous security operations.

What we're looking for

• Must reside within 60 minutes of Louisville, NYC, Dallas, Charlotte, Tampa, Miami, Washington DC, Chicago, Boston, Atlanta, or Nashville.
• Must have 3+ years of Cyber Security experience.
• Must have 3+ years of Digital Forensics and/or Incident Response experience.
• Must have 3+ years of experience working with Splunk, including authoring queries, alerting, and dashboard development.
• Must have a high-speed internet connection (minimum 25 Mbps download/10 Mbps upload) and a dedicated workspace.
• Must be able to participate in a mandatory on-call rotation.
• 5+ years of Digital Forensics experience, including experience with FTK, Axiom, Encase, and other forensics tools (preferred).
• GIAC/SANS GCFE, GCFA, GIME, and/or GASF certifications (preferred).
• 2+ years of cloud forensics/incident response (preferred).
• 1+ years of experience working with and/or investigations of artificial intelligence systems (preferred).