Incident Response and Forensic Analyst

Location:  Remote (USA)

Experience Level:  Mid-level (Senior role may be considered for the right applicant)

Position Type:  Volexity Incident Response & Advanced Threat Analysis

JOB DESCRIPTION

Volexity’s Incident Response and Forensic Analysts provide support and lead investigations related to a wide range of cyber-attacks.  

Candidates applying for this role should expect a job opportunity where they can:

• Analyze and respond to everything ranging from widespread commodity threats to the most complex and advanced intrusions facing organizations today
• Work on investigations that evoke a sense of personal investment
• Collaborate with Volexity’s Network Security Monitoring, Threat Intelligence, and Engineering teams 

Candidates should have experience with analyzing systems and system artifacts, such as memory, disk images, logs, and network data, to determine root cause and impact. Analysts collaborate with Volexity's Threat Intelligence and client teams to uncover attacker activity, preserve digital evidence, and provide clear forensic findings.

RESPONSIBILITIES

Responsibilities of an Incident Response and Forensic Analyst will include but not be limited to:

• Incident Response: Lead and support investigations into security incidents, including APT intrusions, malware infections, ransomware, unauthorized access to cloud environments, and data breaches.
• Digital Forensics: Collect, preserve, and analyze digital evidence across endpoints, servers, cloud environments, and network systems, placing strong emphasis on memory forensics and volatile data analysis.
• Tool & Process Development: Develop and refine forensic workflows, scripts, and methodologies to improve investigation effectiveness.
• Reporting & Documentation: Produce detailed forensic reports, executive summaries, and technical briefs that clearly communicate findings.
• Cross-Team Collaboration: Partner with our Network Security Monitoring, Threat Intelligence, and Engineering teams to share insights and strengthen detection and response capabilities within our solutions.
• Proactive Assessments: Support threat-hunting activities, compromise assessments, and M&A cybersecurity assessments to identify weaknesses before incidents occur.
• Trusted Advisory: Serve as a trusted advisor to clients by addressing cybersecurity questions, providing expert guidance, and supporting their overall security posture.