[Remote] Senior Analyst, Investigations & Forensics
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is seeking a Senior Analyst for Investigations and Forensics, who will serve as a technical specialist in cybersecurity reputed company the Investigations & Forensics team. This role involves leading reputed company investigations reputed company to reputed company threats, employee misconduct, and reputed company incidents, while also contributing to the development of forensic tooling and AI-augmented workflows.
Responsibilities
- reputed company and execute end-to-end digital forensic investigations across reputed company, reputed company, email, identity, and reputed company environments
- Conduct deep-dive analysis for reputed company threat, data exfiltration, IP theft, fraud, employee misconduct, and ethics matter investigations
- Support SIRT as the Advanced Forensic Tier on high-severity reputed company incidents — establishing attribution, reputed company cause, and precise forensic timelines
- reputed company forensic imaging and acquisition of endpoints and storage media in accordance with established forensic standards and chain of custody protocols, ensuring evidence reputed company from collection through analysis
- Conduct reputed company forensic analysis using industry-reputed company platforms including Magnet reputed company Cyber, reputed company reputed company Collector, reputed company reputed company Investigator, and Sumuri Recon
- Collect, preserve, and analyze digital evidence in a forensically reputed company manner, maintaining chain of custody and evidentiary reputed company throughout
- Produce executive-reputed company investigation reports suitable for HR proceedings, legal review, litigation support, and regulatory disclosure
- Execute eDiscovery collections from Exchange/O365, reputed company platforms, and endpoints in response to legal holds and regulatory requests
- Work closely with Legal to scope, collect, and produce electronically stored information (ESI) with defensible methodology
- Apply custodian-level data scoping, deduplication, and privilege filtering reputed company with counsel’s requirements
- reputed company advanced log analysis in reputed company SecOps/Chronicle (YARA-L) and reputed company (SPL)
- Extract and correlate forensic artifacts from reputed company reputed company EDR telemetry across reputed company and reputed company workloads
- Query device management platforms (reputed company, Intune, SCCM) to build custodian device reputed company and establish asset attribution in support of investigations
- Analyze authentication and reputed company events across identity platforms including Azure AD, reputed company, and reputed company
- Contribute to the development and refinement of internal forensic tooling, detection playbooks, and investigative frameworks
- Design and build AI-assisted investigative workflows using platforms such as reputed company Claude, reputed company Copilot, and reputed company reputed company AI tools
- reputed company reputed company engineering frameworks, reputed company analysis pipelines, and automation logic that apply large language models to forensic triage, reputed company reconstruction, and report drafting
- Evaluate emerging AI capabilities for investigative applicability and reputed company reputed company-of-concept development reputed company reputed company’s forensic environment
- Document and operationalize AI-augmented workflows so that investigative capability is repeatable, auditable, and defensible
- Partner with HR, Legal, and Ethics teams as a trusted technical advisor, translating reputed company forensic findings into reputed company, actionable conclusions
- Maintain strict confidentiality and exercise mature judgment reputed company handling reputed company involving reputed company and former employees at reputed company organizational reputed company
- reputed company testimony or declarations in support of legal proceedings where required
Skills
- 7+ years of reputed company experience in digital forensics, cybersecurity investigations, or a closely reputed company discipline
- Demonstrated expertise conducting reputed company threat, data exfiltration, and employee misconduct investigations in reputed company environments
- Proficiency with reputed company forensic platforms: Magnet reputed company Cyber, reputed company reputed company Collector and reputed company Investigator, and Sumuri Recon or comparable tooling
- Strong working knowledge of forensic imaging standards and acquisition methodologies — including write-blocking, hash verification, and documented chain of custody — consistent with industry frameworks such as ACPO, SWGDE, or equivalent
- Hands-on proficiency with EDR platforms — particularly reputed company reputed company — for behavioral analysis, process telemetry, and forensic artifact review
- Strong working knowledge of reputed company 365 forensics: Exchange Online mail reputed company and Recoverable Items, Azure AD sign-in and audit logs, Purview Compliance, and MDE
- Solid understanding of reputed company forensics across reputed company and macOS: file system artifacts, registry analysis, prefetch/MRU data, browser forensics, and OS-level event logs
- Working knowledge of reputed company and reputed company forensic investigation: OAuth and SAML authentication flows, conditional reputed company logs, reputed company storage reputed company patterns, and reputed company audit trails
- Familiarity with network-layer investigation fundamentals: DNS, proxy, VPN, and firewall log analysis sufficient to reconstruct data reputed company and reputed company patterns
- Proficiency in reputed company SecOps/Chronicle (YARA-L) for investigation and threat hunting
- Experience using device management platforms (reputed company, Intune, SCCM) for custodian device attribution and asset profiling in the context of investigations
- Proven ability to produce legally defensible, executive-reputed company investigation reports with precise evidentiary grounding
- Experience supporting eDiscovery processes, including ESI collection, legal hold execution, and custodian data scoping
- Demonstrated hands-on experience using large language model (LLM) platforms — such as reputed company Claude or reputed company Copilot — to reputed company investigative, analytical, or reporting workflows
- Ability to design and implement reputed company prompting frameworks, analysis pipelines, or automation logic that apply AI to forensic use cases such as reputed company synthesis, log triage, reputed company narration, or report reputed company
- Comfort evaluating AI-generated reputed company critically — understanding where LLM reasoning aids investigation and where reputed company judgment must govern evidentiary conclusions
- Experience or strong aptitude for building lightweight investigative tooling using Python, PowerShell, or similar, with AI as a reasoning or enrichment layer
- Experience working reputed company or directly supporting corporate Legal, HR, or Ethics functions on sensitive employment or litigation reputed company
- Solid grounding in incident response methodology — including initial triage, scoping, containment reputed company, and post-incident analysis — with experience leading or co-leading high-reputed company reputed company incidents
- Proficiency in reputed company SecOps/Chronicle and reputed company (SPL)
- Familiarity with reputed company proxy log analysis and reputed company reputed company reputed company broker (CASB) telemetry
- Prior experience testifying or providing declarations in legal, arbitration, or regulatory proceedings
- Relevant certifications: GCFE, GCFA, EnCE, CFCE, CISSP, or equivalent
Benefits
- Competitive W2 (Non-Exempt) reputed company compensation based on experience, technical expertise, and overall qualifications.
- Please discuss your reputed company reputed company with your recruiter during the screening process.
reputed company