Investigation Support Analyst

About the role

We are seeking a skilled Investigation Support Analyst to support cybersecurity investigations, incident response, and malware analysis efforts. This role is responsible for conducting in-depth digital forensic analysis, reverse engineering malicious code, and supporting containment and recovery activities following cybersecurity incidents.

Responsibilities

• Perform digital forensic investigations using tools such as EnCase, FTK, AXIOM, or similar platforms
• Use cybersecurity tools (e.g., FireEye, Microsoft ATA, Splunk, Exabeam, Stealthwatch, Wireshark) to support incident detection and response
• Conduct malware analysis, reverse engineering, and code disassembly using tools such as IDA Pro
• Utilize debugging tools including ollydbg, WinDbg, and Immunity Debugger to analyze malicious activity
• Analyze malicious code to determine functionality, impact, and indicators of compromise
• Support and lead incident response activities, including containment, eradication, and recovery
• Work across multiple operating systems and programming environments to support forensic analysis
• Use Linux/UNIX command-line tools and apply TCP/IP and networking concepts during investigations
• Maintain detailed, accurate documentation of forensic findings and security incidents
• Ensure all activities comply with established security protocols, policies, and procedures

Requirements

• Minimum 2 years of experience using digital forensic tools such as EnCase, FTK, AXIOM, or equivalent
• At least 3 years of experience with cybersecurity and security monitoring tools, including FireEye, Microsoft ATA, Splunk, Exabeam, Stealthwatch, Wireshark
• Experience with debugging tools (ollydbg, WinDbg, Immunity Debugger) and disassembly tools (IDA Pro)
• Hands-on experience with reverse engineering and malware analysis
• Strong understanding of programming and operating system concepts
• Basic working knowledge of Linux/UNIX command-line, TCP/IP, and networking fundamentals

Qualifications

• Minimum Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
• Minimum 5 years of relevant work experience
• Clearance requirement: Ability to obtain and maintain Top Secret / SCI

Skills

• Experience supporting SOC or CSIRT operations
• Strong analytical, investigative, and documentation skills
• Ability to communicate technical findings clearly to varied audiences
• Experience working in incident response or threat analysis environments

Benefits

Corinth offers a comprehensive benefits package to support employees’ health, well-being, and financial security. Benefits for eligible employees include multiple medical plan options, dental and vision coverage, health savings and flexible spending accounts, employer-sponsored life and disability insurance, and access to wellness and health advocacy resources. Employees are also eligible to participate in a 401(k) retirement savings plan with company match and immediate vesting. Paid time off benefits include paid holidays, paid time off (PTO), sick leave, paid volunteer time, parental leave, and other leave programs. All employees have access to an Employee Assistance Program (EAP) offering confidential counseling and support services. Professional development and training opportunities are also provided.