Cybersecurity Forensics Analyst - Expert

The Cybersecurity Forensics Analyst - Expert within Huntington Bank’s DFIR team supports Information Security incident investigations and responses using enterprise eDiscovery and forensics capabilities. This role also supports CIRT functions and coordinates closely with CSOC, Insider Threat, Corporate Security, Human Resources, and Legal to analyze digital evidence and assist with litigation-related needs.

Role Focus

Serve as a forensics investigations expert and point of contact for Legal, Corporate Security, Human Resources, and other groups that require investigative and eDiscovery support. Analyze incident evidence to clarify the “who, what, when, and how,” and deliver reports aligned to legal and investigation requests.

Key Responsibilities

• Act as an expert for Forensics Investigations and serve as a liaison to Legal, Corporate Security, Human Resources, and related stakeholders.
• Advise lawyers and investigators on the relevance of data to investigations and case needs.
• Support litigation activities as required, including potential testimony and participation in litigation hold as part of internal investigation findings.
• Investigate reports of suspicious activity by analyzing evidence to determine incident specifics across “who, what, when, and how.”
• Use corporate forensic tools and investigative methods to discover, process, and preserve emails and documents potentially needed for litigation.
• Collaborate with internal and external counsel, Corporate Security, and Human Resources to provide requested reports for legal and investigation purposes.
• Maintain chain of custody for evidence used in crimes and/or incidents, including computers, thumb drives, CDs, DVDs, backup tapes, smartphones, tablets, and cameras.
• Use file recovery programs to search for and restore deleted data.
• Track and report metrics relevant to the forensics workload.
• Work with vendors to understand product roadmaps and support upgrade planning.
• Provide after-hours on-call incident support on a 4-week rotating basis (subject to change).

Required Qualifications

• Minimum 5 years in a Forensics/eDiscovery role.
• Bachelor’s degree, or 4+ additional years in professional forensics and/or adjacent cybersecurity experience.

Technologies

• Enterprise eDiscovery
• Guidance/OpenText Enterprise EnCase solution
• Access Data Forensics Took Kit
• SIEM
• DLP
• IPS
• Anti Malware
• Firewalls

Preferred Qualifications

• Experience using Enterprise eDiscovery/Forensics tools and/or Insider Threat monitoring tools.
• Experience with Guidance/OpenText Enterprise EnCase solution, Access Data Forensics Took Kit, or similar solutions in an enterprise-wide deployment.
• Hands-on experience implementing or operating security tools including SIEM, DLP, IPS, Anti Malware, and Firewalls.
• Ability to document and maintain procedures/runbooks.
• Strong troubleshooting and problem-solving skills.
• Experience reviewing technical and procedural documentation to ensure completeness and accuracy.
• Ability to maintain and update runbooks and other support documents.
• Provide input to architecture and technology teams on tools, processes, and requirements for forensics investigations and eDiscovery matters.
• Maintain current knowledge of hardware, software, and network technology and recommend modifications as required.
• Comply with the organization’s cybersecurity policies and procedures for colleagues, contractors, alliances, and related partners.

Compensation and Employment Details

• Location: Columbus, OH (onsite)
• Salary: USD 70,000 - 140,000 per year
• Exempt status: Yes
• Workplace type: Office

Benefits

• Health insurance coverage
• Wellness program
• Life and disability insurance
• Retirement savings plan
• Paid leave programs
• Paid holidays
• Paid time off (PTO)
• Eligible to participate in an applicable incentive compensation plan