Senior Forensics Investigator - Global Security Organization

Tasks

• Acquire and analyze cloud artifacts
• Acquire and preserve digital evidence
• Analyze telemetry for staging access and exfiltration
• Build evidence chains
• Build timelines and entity relationships
• Communicate findings to non-technical stakeholders
• Conduct post-incident reviews
• Coordinate cross functional forensic efforts
• Correlate and analyze multi source logs
• Develop automation scripts
• Drive Threat Hunting
• Investigate insider and external threats
• Lead end to end investigations
• Maintain forensic lab equipment
• Manage external vendors
• Mentor and train junior analysts
• Perform host-based forensics
• Produce audit ready investigation conclusions
• Propose detection rules and playbooks

Perks/Benefits

• N/A

Skills/Tech-stack

Amazon Web Services | Android Forensics | Automation | Azure | Cloud Forensics | Cloud platform | DLP | DNS | Digital forensics | EDR | Evidence Preservation | Firewall | Google Cloud | Google Cloud Platform | HIDS | Host Forensics | IOS Forensics | Incident Response | Linux forensics | Log Analysis | MacOS forensics | Mobile forensics | Network Forensics | Network flow | Proxy | Python | Scripting | Threat Investigation | Timelining | VPN | Web Services | Windows forensics