On our Cyber Defense team, you will investigate security incidents and conduct thorough forensic analysis across multiple systems. You will determine points of compromise and assess the scope and impact of incidents. Your work will support containment and remediation efforts while providing valuable insights.
Requirements: 3+ years of experience IR / digital forensics
Conduct digital forensic on endpoints, servers, networks and cloud environments (AWS, Azure, GCP)
Experience using forensics tools such as: Volatility, FTK, Autopsy, log2timeline, X-ways
Apply Knowledge of Windows/ Linux internals and their forensic artifacts - including processes, memory, registry, event logs, file systems and persistence mechanisms.
Hands on experience with data analysis using Splunk, ELK stack or other SIEM platforms
Experience in programming or scripting language (Python, PowerShell, C# etc.)
This position is open to all candidates.