Cyber Forensics

Cyber Forensics Cybersecurity Jobs

17 jobs found

3d ago

Security Engineer III, Exploitation Analyst / Incident Responder (TS Clearance)

Deloitte Arlington, VA

Arlington, VA

3d ago

$103k - $189k/yr Full time Senior Cyber Forensics Cybersecurity Tools

Apply Now

Job Description

Security Engineer III, Exploitation Analyst / Incident Responder with an active Top Secret clearance and SCI eligibility is a key member of Deloitte's Cyber Defense & Resilience team in Arlington, VA. This onsite role focuses on monitoring for indicators of compromise, investigating incidents, evaluating vulnerabilities, and analyzing malware to strengthen security across enterprise environments.

Responsibilities

Continuously monitor networks, systems, and applications for signs of compromise and correlate threat data to detect malicious activity.
Investigate security incidents by collecting and examining logs, memory artifacts, and network traffic, supporting containment, eradication, and recovery efforts.
Identify and assess vulnerabilities across assets and recommend risk-based remediation actions considering exploitability.
Analyze malware, exploits, and adversary tooling, including reverse engineering where appropriate and simulating attacker techniques in controlled environments.
Prepare technical reports, briefings, and documentation that summarize findings, methodologies, and recommendations for stakeholders.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance with SCI eligibility.
2+ years of experience in cyber exploitation analysis, threat intelligence, or incident response.
2+ years of experience analyzing advanced persistent threats, malware, exploitation techniques, and reverse engineering tools such as IDA Pro or Ghidra.
2+ years of experience performing vulnerability assessments, penetration testing, or red team activities.
2+ years of experience with network traffic analysis, log analysis, digital forensics, Windows, Linux, macOS, common network protocols, scripting languages (Python, PowerShell, or Bash), and security monitoring tools (SIEM, IDS, IPS, or EDR).
Ability to travel up to 20% on average based on client needs and project assignments.
Willingness to work onsite with clients or at Deloitte offices for up to five days per week.
Industry certifications such as GIAC, CISSP, or CompTIA Security+ are required.
Must be legally authorized to work in the United States without employer sponsorship now or in the future.

Technologies

IDA Pro
Ghidra
Python
PowerShell
Bash
SIEM
IDS
IPS
EDR
Windows
Linux
macOS
MITRE ATT&CK

Benefits

Discretionary annual incentive program, subject to program rules, based on individual and organizational performance.

The Team

Deloitte's Cyber Defense & Resilience offering helps clients defend against advanced threats by transforming security operations, enhancing monitoring technologies, leveraging data analytics, and utilizing threat intelligence. The team supports dynamic attack surfaces and delivers rapid crisis and cyber incident response to ensure clients can prepare for, respond to, and recover from business disruptions.

Wage Range

Salary for this role is USD 102,500 to 188,900 annually. The range reflects factors such as skills, experience, licensure, certifications, and business needs, and is not adjusted for location-based differences where the role may be filled.

Preferred Qualifications

Experience supporting incident response in government, defense, intelligence, or large enterprise environments.
Experience analyzing packet captures, memory dumps, and host-based forensic artifacts.
Experience mapping threat activity to the MITRE ATT&CK framework.
Experience developing or tuning detections for SIEM or EDR platforms.
Industry certifications such as GIAC, CISSP, or CompTIA Security+.

View full job page →

11d ago

Sr Mgr CyberSecurity Incident Response

Mountain America Credit Union Sandy, UT

Sandy, UT

11d ago

Full time Manager Senior Cyber Forensics

Apply Now

Job Description

Mountain America Credit Union is seeking a seasoned security leader to helm its enterprise incident response, digital forensics, and insider threat programs from its Sandy, Utah campus on a hybrid schedule. In this senior role, you will coordinate with Cybersecurity, IT, Legal, HR, Governance, Risk Management, and executive leadership to detect, respond to, and recover from cybersecurity incidents while safeguarding member data and critical systems.

Responsibilities

Lead the enterprise cybersecurity incident response program across preparation, detection, containment, eradication, and recovery activities.
Act as the executive incident commander for high severity events, coordinating technical teams, business stakeholders, and leadership.
Define and maintain incident response plans, playbooks, escalation models, and crisis communication procedures.
Provide executive briefings during and after incidents, including post-incident reports, root cause analysis, and lessons learned.
Oversee breach investigations, digital forensics, and evidence preservation in collaboration with Legal and Compliance.
Lead tabletop exercises, red/blue team simulations, and ransomware readiness scenarios.
Direct brand protection efforts to safeguard reputation and identity.
Drive proactive threat hunting to identify advanced threats, vulnerabilities, and anomalous activity across the enterprise.
Own and operate the enterprise Insider Threat Program, addressing malicious, negligent, and compromised insider risks.
Define insider threat detection, triage, investigation, and response processes spanning people, process, and technology.
Collaborate with HR, Legal, Privacy, and Risk Management to ensure investigations are lawful and appropriate.
Implement behavioral, technical, and contextual monitoring capabilities.
Establish governance, oversight, and separation of duties for insider investigations.
Work with SOC leadership to enhance monitoring, alerting, and response automation.
Foster continuous improvement through metrics and maturity models.
Translate threat intelligence into actionable detection and response strategies.
Ensure alignment with regulatory frameworks including NCUA, FFIEC, and NIST.
Support audits, regulatory exams, and breach notification requirements.
Partner with Risk Management and Internal Audit to remediate gaps.
Lead and mentor incident response and insider threat professionals.
Collaborate across IT, Digital Solutions, Legal, HR, Communications, and executive groups as a trusted advisor during high impact situations.

Requirements

6+ years of experience in cybersecurity operations or incident response with progressive responsibility.
5+ years in a leadership role responsible for cybersecurity operations or incident response.
Experience leading enterprise-scale incident response programs.
Financial services or regulated industry experience preferred.
Bachelor’s degree in a related discipline or equivalent experience.
CISSP strongly preferred; certifications such as GCIH, GCFA, CISM, CISA, or GIAC are highly desirable.
Expertise in incident response and digital forensics.
Strong understanding of insider threat risk and investigations.
Executive-level communication and leadership under pressure.
Proven ability to balance security, privacy, and business needs.
Strategic thinking and problem-solving capabilities.
Effective verbal and written communication skills.
Leadership and talent management experience, with public speaking proficiency.

Physical Abilities / Working Conditions

Physical Demands: ability to sit, talk, and hear consistently.
Vision Requirements: close vision, distance vision, and color vision capabilities.
Weight Lifted or Force Exerted: ability to lift up to 10 pounds frequently and up to 25 pounds occasionally.
Environmental: typical office setting with no unusual environmental factors.
Noise Environment: moderate office noise from computers and printers.

This job is not eligible to be performed in Colorado or Connecticut, either remotely or in-person.

View full job page →

19d ago

Cybersecurity, Privacy and Forensics - Cyber Incident Response - Manager

PRICE WATERHOUSE COOPERS Cleveland, OH

Cleveland, OH

19d ago

$99k - $232k/yr Full time Manager Cyber Forensics Cyber Investigation

Apply Now

Job Description

PwC's Cybersecurity, Privacy and Forensics practice presents a Manager role focused on Cyber Incident Response in Cleveland, Ohio. This onsite position combines leadership of incident response programs with proactive client solutions, vulnerability management, and secure system design within Technology Consulting, backed by a salary range of USD 99,000 to 232,000 per year. The ideal candidate will supervise teams, guide governance frameworks, and manage client accounts to strengthen defenses and incident readiness.

Responsibilities

Oversee cybersecurity incident response programs to detect, analyze, and remediate security events.
Develop and deploy strategies to mitigate threats and safeguard client systems and data.
Direct teams in applying cybersecurity frameworks and governance practices across engagements.
Leverage digital forensics and threat intelligence to enhance incident management capabilities.
Design and maintain secure network architectures and security infrastructure for clients.
Perform vulnerability assessments and manage remediation plans to minimize risk exposure.
Collaborate with clients to address cybersecurity challenges and deliver proactive solutions.
Mentor team members to grow skills in cybersecurity risk management and threat mitigation.
Analyze complex systems to identify interdependencies and strengthen security measures.
Foster innovation and adaptability to continuously improve cybersecurity strategies and offerings.

Requirements

Bachelor's degree required.
Minimum of 4 years of relevant experience.

Benefits

Annual discretionary bonus
Medical insurance
Dental insurance
Vision insurance
401(k) retirement plan
Holiday pay
Paid vacation
Personal and family sick leave

View full job page →

20d ago

Cybersecurity Analyst (JNY)

Peraton Fort Bragg, NC

Fort Bragg, NC

20d ago

$66k - $106k/yr Full time Analyst Cyber Forensics Cybersecurity Tools

Apply Now

Job Description

The Cybersecurity Analyst (Journeyman) supports USSOCOM SITEC EOM at Fort Bragg, North Carolina, onsite. The role focuses on defending NetOps, mentoring junior analysts, and strengthening SOC capabilities within a 24/7 operations environment.

Responsibilities

Identify and analyze sophisticated threats using SIEM platforms, intrusion detection systems, and other security tools.
Correlate data from multiple sources to uncover advanced persistent threats and complex attack patterns.
Refine detection rules and alerts to enhance threat identification capabilities.
Lead the management of high priority security incidents, coordinating containment, eradication, and recovery efforts.
Perform root cause analysis and deliver actionable mitigation recommendations.
Create detailed post incident reports to inform organizational strategy and resilience.
Lead audits and assessments, providing recommendations to improve compliance and streamline processes.
Apply advanced skills to secure NetOps and systems/network infrastructure against evolving threats.
Mentor junior analysts, fostering growth and technical capability within the team.
Collaborate with SOC colleagues, IT staff, and stakeholders to develop coordinated threat responses.
Contribute to cross functional discussions to drive improvements in SOC operations.
Engage in continuous improvement and research to stay informed on emerging threats, technologies, and best practices; identify tools and strategies for better operations and deliver training as needed.
Operate within a 24/7 SOC environment, which may involve shift work including nights, weekends, and holidays.
Handle sensitive and classified information in compliance with DoD and USSOCOM requirements.

Requirements

Education and experience: BS with 2 years of experience; or high school diploma with 6 years of experience; or associate degree with 4 years of experience.
DoD TS with SCI clearance is required.
Certification: DoD 01-M IAT II and CSSP Analyst or CSSP Incident Responder, which may be satisfied by any of the following certifications: CEH, CFR, CCNA Cyber Ops, CCNA Security, CySA+, CHFI, GCIA, GCIH, GCFA, GICSP, Cloud+, SCYBER, or PenTest+.
Solid understanding of cybersecurity concepts, including threat detection, malware analysis, and network security.
Proficiency with one or more security tools such as SIEM platforms, IDS/IPS, endpoint protection solutions, and forensic analysis tools.
Strong analytical and problem solving skills with the ability to handle complex incidents.
Effective written and verbal communication, including the ability to produce detailed reports and brief stakeholders.
Ability to work independently and lead initiatives in a fast paced, team oriented environment.
Shift schedule: 12 hour rotating shifts totaling 80 hours over a two week pay period; weekly rotations are Sunday-Wednesday or Wednesday-Saturday and consist of 3x12 hour shifts or 3x12 hour shifts plus 1x8 hour shift.

Technologies

SIEM platforms
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
Endpoint protection solutions
Forensic analysis tools
Python
PowerShell

Benefits

Medical
Dental
Vision
Life
Health Savings Account
Short-term disability
Long-term disability
Employee Assistance Program (EAP)
Parental leave
401(k)
Paid time off for vacation
Company paid holidays

Details

Target Salary Range: $66,000 - $106,000 per year. Salary is determined by factors including scope of responsibilities, experience, education, knowledge, skills, competencies, location, and contract considerations. Overtime, shift differential, and discretionary bonuses may apply depending on the role.
Benefits Overview: Eligible employees receive a comprehensive benefits package including medical, dental, vision, life, health savings account, disability coverage, EAP, parental leave, 401(k), PTO, and paid holidays. A full benefits listing is available at the employer's benefits page.
Application Timeline: The posting period is estimated at 30 days from the posting date, subject to change based on business needs and candidate availability. Applicants may be asked to participate in an on camera interview and identity verification during the review process.
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

View full job page →

20d ago

Cybersecurity Analyst Tier 3

University of Utah Salt Lake City, UT

Salt Lake City, UT

20d ago

$100k - $196k/yr Full time Senior Analyst Cloud Platforms

Apply Now

Job Description

What we offer

Join the University of Utah Security Operations Center as a Senior Cybersecurity Analyst (Tier 3) on site in Salt Lake City. This full time role offers a competitive salary in the range of $100,000 - $195,795 per year and the chance to lead complex investigations, steer detection engineering, and drive automation across endpoint, network, cloud, and identity domains. You will collaborate with a skilled SOC team and influence incident response and proactive security across campus systems.

Responsibilities

Oversee the complete incident response lifecycle across endpoints, networks, cloud, and identity, from triage through containment, eradication, and post incident analysis.
Act as the senior escalation contact for Tier 2 analysts, providing technical direction and oversight for complex investigations.
Perform digital forensics to support root-cause analysis, adjust detections to close gaps, and develop post-incident action plans.
Own detection strategy and coverage across key threat domains, defining telemetry requirements with security engineering and platform owners.
Lead the development of detection standards and quality metrics.
Design and maintain detection logic across SIEM, EDR, and cloud platforms, ensuring high fidelity alerts through tuning, enrichment, and multi-source telemetry correlation.
Identify detection gaps based on threat intelligence and the incident response lifecycle.
Design, build, and maintain automation with SOAR to improve triage, data enrichment, and response efficiency.
Operationalize threat hunting findings into scalable detection use cases and playbooks.
Lead hypothesis-driven threat hunting campaigns informed by threat intelligence, turning findings into durable detections and response playbooks.
Conduct proactive threat hunting to detect advanced adversarial activity not covered by existing controls.
Analyze attacker behavior and map it to known tactics, techniques, and procedures (TTPs).
Continuously evaluate detection coverage, reduce false positives, and improve detection quality.
Assist in mentoring and developing Tier 1/2 SOC analysts and conduct periodic investigation reviews to ensure quality.
Advance SOC processes, workflows, and incident response playbooks; produce clear after action reports and executive-ready summaries.
Partner with internal IT teams to improve logging, telemetry, and observability across the environment.

Requirements

Minimum experience: 6 years
Education: Master’s degree or equivalent
Equivalency statement: 1 year of higher education can substitute for 1 year of directly related work experience (example: a bachelor’s degree equals 4 years of related experience)
Information Security Analyst, IV: bachelor’s (or equivalent) + 8 years or master’s (or equivalent) + 6 years
Information Security Analyst, V: bachelor’s + 10 years or master’s + 8 years
Information Security Analyst, VI: bachelor’s + 12 years or master’s + 10 years
Information Security Analyst, VII: bachelor’s + 14 years or master’s + 12 years

Technologies

SIEM
EDR
SOAR

Preferences

Strong operational security background
Experience analyzing large volumes of logs, network data, and other attack artifacts during investigations
Proficiency with SIEM and SOAR platforms; ability to apply behavioral, statistical, and machine learning techniques across multiple data sources
Solid understanding of the network threat lifecycle, attack vectors, and exploitation methods (TTPs)
Experience securing cloud environments (AWS, Azure, GCP) and using cloud-native security tools to protect data
Proficiency in scripting and programming

Application details

Requisition Number: PRN45436B

Employment type: Full Time

Work schedule: Monday - Friday, 9 a.m. - 5 p.m. with on call responsibilities after hours, weekends, and holidays

Department: 00954 - UIT Systems & Security

Location: Campus (Salt Lake City, onsite)

Pay rate range: $100,000 to $195,795

Close date: 7/6/2026

How to apply: visit https://utah.peopleadmin.com/postings/204073

View full job page →

21d ago

Senior Cybersecurity Analyst

Municipality of Anchorage Anchorage, AK

Anchorage, AK

21d ago

$44 - $65/hr Full time Manager Senior Cyber Forensics

Apply Now

Job Description

The Municipality of Anchorage seeks a Senior Cybersecurity Analyst to lead advanced security initiatives and supervise Systems Analysts under the Chief Information Security Officer. This on-site role in Anchorage, Alaska coordinates staff, vendors, and municipal entities to uphold a strategic security posture and guide the municipality’s information security program.

Overview

The Senior Cybersecurity Analyst leads subordinate Systems Analysts and delivers highly specialized systems support, programming, and analysis for the municipality’s information security program under the Chief Information Security Officer. The role involves planning security functional systems, programs, and services, and providing implementation and maintenance to ensure alignment with strategic security directions.

Responsibilities

Under general direction of the Chief Information Security Officer, leads subordinate Systems Analysts and provides highly specialized and advanced systems support, programming, and analysis for the Municipality of Anchorage s information security program.
Assists in the planning of security functional systems, programs, and services.
Provides implementation and maintenance for security functional systems, programs, and services.
Leads Municipal staff, contracting vendors, and other Municipal entities in ensuring the strategic security direction of the Municipality is followed.
Assignments include intrusion detection/prevention and remediation, forensics, personnel investigations, enforcement of Municipal-established security policies, security audits of new legacy systems, and issues surrounding Municipal data confidentiality.
Performs other duties as assigned.

Requirements

Open to the general public and any current Municipal employee.
Non-represented position (no union affiliation) and subject to the Municipality of Anchorage Personnel Rules.
Legally authorized to work and accept employment in the United States; the Municipality does not provide sponsorship.
Participates in the U.S. Department of Homeland Security E-Verify Program.
Background check required and must be satisfactory.
Military Service Interview Preference: Veterans may receive interview preference, with documentation; minimum qualifications must be met for preference consideration.
National Guard or organized military reserves: Members may receive interview preference with proof of current service; minimum qualifications must be met for preference consideration.

Department

Information Technology

Hours

Monday - Friday, 8:00am - 5:00pm

Location

City Hall, 632 W 6th Ave, 4th Floor, Anchorage, AK

Compensation

USD 44 - 65 per hour

Supplemental Information

The Municipality of Anchorage participates in the U.S. Department of Homeland Security E-Verify Program. For more information, visit the E-Verify page at USCIS.

Application Process

When you click the Apply link in the vacancy notice, you will be directed to GovernmentJobs.com to log into an existing account or create a profile, review updates, and submit your application. The GovernmentJobs site is not administered by the Municipality of Anchorage. For technical assistance, contact GovernmentJobs customer support at 1-855-524-5627. For general questions about Municipal vacancies or the employment process, contact the Human Resources Department at 907-343-4442 during regular business hours (Monday–Friday, 8:00 am to 5:00 pm, Alaska Standard Time).

EO/AA and ADA

The Municipality of Anchorage is an equal opportunity and affirmative action employer and complies with Title I of the Americans with Disabilities Act. For information regarding reasonable accommodations under the ADA, contact the Municipality of Anchorage ADA Coordinator at 907-343-4571.

Military Service Preference

Veterans may receive interview preference as permitted by Municipal Personnel Rules. Applicants must attach documentation showing honorable or general (under honorable conditions) discharge. Minimum qualifications must be met. National Guard or reserves may also receive interview preference with proof of current service.

National Service Employer Status

The Municipality of Anchorage is an Employer of National Service. Please include any AmeriCorps, Peace Corps, or other national service volunteer work in the work history portion of your application.

View full job page →

23d ago

Cybersecurity, Privacy and Forensics - Cyber Incident Response - Manager

PRICE WATERHOUSE COOPERS New York, NY

New York, NY

23d ago

$99k - $232k/yr Full time Manager Cyber Forensics Cybersecurity Tools

Apply Now

Job Description

Lead cyber incident response initiatives and cybersecurity engagements within PwC's Technology Consulting practice, focusing on incident handling, threat mitigation, digital forensics, and secure architectures for client environments.

Responsibilities

Direct cyber incident response activities to detect, analyze, and resolve security incidents efficiently.
Develop and execute strategies to mitigate threats and safeguard client systems and data.
Guide teams as they implement cybersecurity frameworks and established governance practices.
Leverage digital forensics and threat intelligence to strengthen incident management workflows.
Design, deploy, and maintain secure network architectures and protection measures.
Perform vulnerability assessments and manage remediation plans to reduce risk exposure.
Partner with clients to address cybersecurity challenges and deliver proactive solutions.
Mentor staff to advance skills in cybersecurity risk management and threat mitigation.
Analyze complex systems to uncover connections that inform stronger security controls.
Foster innovation and adapt to evolving security landscapes to enhance strategies.

Requirements

Bachelor's degree or higher
Minimum of 4 years of relevant experience

Benefits

Annual discretionary bonus
Medical, dental, and vision coverage
401(k) retirement plan
Holiday pay
Vacation time
Personal and family sick leave

What sets you apart

Preference for study areas including Business Studies, Computer and Information Science, Information CyberSecurity, Information Technology, or Management Information Systems
Proven proficiency in Cybersecurity Frameworks and governance
Experience with Cyber Threat Intelligence and Digital Forensics
Strength in Incident Management and Response Planning
Knowledge of Network Forensics and Security Architecture
Experience with Vulnerability Assessment and Management
Willingness to adapt and drive innovation in cybersecurity strategies