Senior Analyst - Investigations & Forensics (Remote – USA)

Responsibilities

• Lead end to end forensic investigations (endpoint, cloud, email, identity, SaaS).
• Conduct deep dive analysis for insider threat, IP theft, fraud, misconduct, and ethics matters.
• Support high severity incidents as the Advanced Forensic Tier for SIRT.
• Perform forensic imaging/acquisition with strict chain of custody protocols.
• Use enterprise forensic platforms (Magnet AXIOM Cyber, Cellebrite, Sumuri Recon).
• Execute eDiscovery collections (Exchange/O365, cloud, endpoints) for legal/regulatory requests.
• Execute advanced log analysis (Google SecOps/Chronicle, Splunk) and EDR telemetry review (CrowdStrike Falcon).
• Develop AI augmented investigative workflows using LLM platforms (Anthropic Claude, Microsoft Copilot).
• Produce executive quality reports for HR, Legal, and regulatory disclosure.
• Partner with HR, Legal, and Ethics teams as a trusted technical advisor.

Requirements

• 7+ years in digital forensics or cybersecurity investigations.
• Expertise in insider threat, data exfiltration, and misconduct investigations.
• Proficiency with Magnet AXIOM Cyber, Cellebrite, Sumuri Recon.
• Strong knowledge of forensic imaging standards, chain of custody, and ACPO/SWGDE frameworks.
• Hands on experience with CrowdStrike Falcon, Microsoft 365 forensics, Windows/macOS artifacts.
• Cloud/SaaS forensic investigation skills (Azure AD, Okta, Zscaler).
• Proficiency in Google SecOps/Chronicle (YARA L), Splunk.
• Experience with device management platforms (JAMF, Intune, SCCM).
• Certifications: GCFE, GCFA, EnCE, CFCE, CISSP.

Pay

$65/hr. - $70/hr.