Forensic Analysis

Forensic Analysis Cybersecurity Jobs

2 jobs found

1d ago

Senior Cybersecurity - Digital Forensic Investigator

AT&T Charlotte, NC

Charlotte, NC

1d ago

$128k - $193k/yr Full time Senior Chain Of Custody Cloud Platforms

Apply Now

Job Description

This Senior Cybersecurity role focuses on digital forensic investigations to support cybersecurity incidents across AT&T’s enterprise environment. You will collaborate with Incident Response, Threat Intelligence, Malware Analysis, engineering, platform teams, and legal stakeholders to determine what occurred, assess scope and impact, identify attack vectors, and recommend actions to reduce future risk.

Location and Work Details

Location: Charlotte, NC (onsite)
Weekly hours: 40
Time type: Regular
Work location reference: USA:NC:Charlotte / Ibm Dr - Adm:8505 Ibm Dr

Salary Range

USD 128,400 - 192,600 per year

Seniority note (job board range): $128,400.00 - $192,600.00 USD Annual

Key Responsibilities

Conduct digital forensic investigations tied to cybersecurity incidents and suspicious activity.
Collect, preserve, process, and analyze digital evidence while maintaining evidentiary integrity and chain of custody.
Perform forensic analysis across endpoints and memory, as well as logs, cloud, network, and live-response sources.
Identify attack scope, affected assets, root cause, and extent of compromise.
Reconstruct investigative timelines using forensic artifacts, telemetry, and log sources.
Produce detailed technical reports and executive-level summaries that document investigative findings.
Collaborate with Incident Response, Threat Intelligence, Malware Analysis, platform teams, Legal, and other stakeholders during investigations.
Support investigations across on-premises, cloud, and hybrid environments.
Use forensic results to identify security control gaps and recommend improvements.
Support development and improvement of forensic processes, methodologies, automation, and tooling.
Participate in an on-call rotation to support time-sensitive investigations.
Stay current on emerging threats, attack techniques, forensic methodologies, and investigation technologies.
Evaluate and utilize emerging technologies, including artificial intelligence, to improve investigative efficiency and analytical effectiveness while understanding associated risks and limitations.

Required Qualifications

Minimum 3 years of experience in Digital Forensics, Incident Response, Cyber Threat Hunting, Security Operations, or a related cybersecurity discipline.
Experience investigating environments involving Windows, Linux, macOS, cloud platforms, or enterprise network environments.
Experience analyzing forensic artifacts, logs, endpoint telemetry, and other investigative data sources.
Experience documenting findings and preparing technical reports.
Experience or working knowledge in several of the following areas: Digital Forensics; Live Response; Memory Forensics; Endpoint Investigations; Cloud Forensics; Incident Response; Threat Intelligence; Malware Analysis Fundamentals; Log Analysis; Network Security and Protocols; SIEM Platforms; EDR Platforms; Windows, Linux, and macOS; Public Cloud Platforms (AWS and Azure); Scripting and Automation (Python, PowerShell, Bash, or similar); Identity and Access Management; Web Applications and APIs.

Technologies

Windows, Linux, macOS
AWS, Azure
Python, PowerShell, Bash
SIEM Platforms, EDR Platforms
Identity and Access Management
Web Applications and APIs
Generative AI technologies

Education

Bachelor’s degree (BS/BA) desired in Computer Science or Cybersecurity

Preferred Qualifications

Industry certifications such as GCFA, GCFE, GCIH, GNFA, GCIA, CISSP, EnCE, CFCE, or equivalent.
Experience supporting large-scale enterprise investigations.
Experience with cloud-native security investigations.
Experience supporting investigations involving telecommunications, network infrastructure, or large distributed environments.

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone

What Candidates Should Expect

Writing detailed investigative reports.
Leading investigations from evidence collection through final reporting.
Working directly with engineers, security teams, and business stakeholders.
Participating in an on-call rotation.
Handling multiple investigations with competing priorities.
Operating with a high degree of independence and accountability.
Supporting investigations that may require rapid response and extended collaboration during significant cybersecurity events.

Job Contribution

Use advanced, interdisciplinary knowledge to resolve difficult and complex issues using broad professional concepts.
Guide others by applying advanced principles and company practices.
Lead moderate sized projects or parts of larger projects with strategic value.
Operate autonomously with frequent senior leadership interaction.

Supervisor

Role Differentiator

Manages complex cybersecurity work.

View full job page →

1mo ago

Associate/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates New York, NY

New York, NY

1mo ago Closed

$93k - $105k/yr Full time Cyber Forensics Cybersecurity Tools Data Security

This position is no longer accepting applications (closed Sep 6, 2026).

Job Description

Charles River Associates is seeking an Associate for its Forensic Services practice, supporting cybersecurity and incident response work for CRA clients. The role centers on executing security and privacy investigations, providing expert digital forensic assistance during data security incidents, and turning technical findings into forensic deliverables that support legal and business outcomes.

This onsite position is based in New York, NY and is designed for candidates with hands-on experience in digital forensics, malware analysis, and threat-focused incident work, including evidence handling and control assessments aligned to recognized cybersecurity frameworks.

Role Summary

Execute security and privacy investigations related to data security matters, including ongoing breach detection, threat analysis, incident response support, and malware analysis
Provide digital forensic support for counsel and clients in cases such as data breaches and fraud
Draft forensic reports and affidavits, and testify as an expert in digital forensics and incident response
Perform forensic analysis using standard evidence handling techniques and computer forensics tooling
Produce technical assessments/audits and guidance on the adequacy of cyber security controls mapped to frameworks including NIST CSF 2.0, HIPAA, ISO 27001 and 27002, SOC 2, and NERC-CIP

Key Responsibilities

Acquire data and images from identified hosts, then locate evidence of compromise by analyzing disk, file, memory, and logs
Identify artifact and evidence locations to answer questions such as execution, file access, data theft, anti-forensics, and adversary system usage
Hunt and detect unknown live, dormant, and custom malware across enterprise environments
Create Indicators of Compromise (IOCs) to strengthen incident response and threat intelligence
Track adversary activity second-by-second using in-depth timeline analysis
Determine malware type (for example, rootkits, backdoors, and Trojan horses) and support appropriate defenses and response tactics
Identify lateral movement and pivots within client environments, showing how an adversary moves system to system
Use physical memory analysis tools to assess adversary activities on hosts and pivot points across a network
Examine traffic using common network protocols to identify patterns of activity and actions warranting investigation
Identify and track malware beaconing to command-and-control (C2) using memory forensics, registry analysis, and network connections
Assess the appropriateness and sufficiency of available data for access and analysis, including threat intelligence, logging data, and contextual clues
Recognize relationships among multiple sources and information types to support effective data analysis
Use programming and analysis tools including Python, T-SQL, VBA, Excel, and C# for programming, model building, and database administration
Implement quality control measures and documentation to support reliability of analysis and risk management
Participate in practice-building activities, including recruiting and training

Requirements

Bachelor’s or Master’s degree with a relevant academic focus (Computer Science, Digital Forensics, Information Security and/or Information Systems)
2-4 years of relevant work experience in financial/economic analysis, preferably in a consulting firm; applications accepted from recent graduates and candidates in the workforce
Digital forensics/incident response training and certifications, including SANS GIAC (GCFA, GCFE, GNFA, GIME), IACIS (CFCE or CIFR), Magnet MCFE, X-ways X-Pert or similar
Strong understanding of computer operating systems, software, and hardware
Ability to conduct detailed forensic investigations across computers, networks, mobile devices, and removable media
Experience performing digital forensic analysis with commercial and open source tools, including file system forensics, memory analysis, and network analysis
Experience with static/dynamic malware analysis in a lab environment, and threat hunting in a live environment
Experience with proper evidence handling procedures and chain of custody
Experience drafting technical and investigative reports and communicating technical findings
Experience using automation tools and scripts to expedite analysis
Understanding of incident handling procedures: preparation, identification, containment, eradication, and recovery
Understanding of common adversary attack techniques and how to leverage that knowledge to stop further adversary activity
Experience in collegiate computer security competitions

Technologies

Python, T-SQL, VBA, Excel, C#, SANS GIAC (GCFA, GCFE, GNFA, GIME), IACIS (CFCE or CIFR), Magnet MCFE, X-ways X-Pert
NIST CSF 2.0, ISO 27001, ISO 27002, SOC2, NERC-CIP

Compensation and Location

Location: New York, NY (onsite)
Salary: USD 92,500 - 105,000 per year (good-faith estimate of annual base salary range)
Additional compensation: may be eligible for bonus incentive compensation

Benefits

100 hours of training annually through formal and informal programs
Comprehensive total rewards program and a superior benefits package
Wellness programming supporting physical, mental, emotional, and financial well-being
In-house immigration support for foreign nationals and international business travelers
Medical, dental, and vision insurance
401(k) retirement plan with employer match
Life and disability insurance
Paid time off (vacation, sick leave, holidays)
Paid parental leave
Wellness programs and employee assistance resources
Commuter benefits

How to Apply

Resume: include current address, personal email, and telephone number
Cover letter: describe interest in CRA and how the role matches goals
Transcript: may be unofficial

Work Location Flexibility

CRA supports in-office time to enable career growth, mentorship, and inclusivity
Expect individuals to work in the office at least 3 to 4 days per week, with specific days coordinated with practice or team (may include travel to another CRA office or client meetings)

View full job page →

Forensic Analysis Cybersecurity Jobs

Senior Cybersecurity - Digital Forensic Investigator

Associate/Cybersecurity & Incident Response (Forensic Services practice)

Get Forensic Analysis Cybersecurity Jobs alerts