Cyber Incident Responder​/Forensic Analyst

The Cyber Incident Responder / Forensic Analyst performs technical analysis of cyber events, supports incident investigations, and develops evidence-based findings to support containment and remediation actions. This role assists with forensic collection, event correlation, and detailed documentation of malicious or suspicious activity.

• Investigate alerts, anomalies, and incidents using logs, endpoint artifacts, network data, and other evidence sources.
• Support forensic collection, preservation, analysis, and documentation activities.
• Analyze malicious activity patterns, attack vectors, and affected assets.
• Assist with containment and remediation recommendations.
• Document investigative findings, timelines, and technical evidence for incident reports.
• Coordinate with incident response leadership and engineering teams during active events.
• Contribute to lessons learned, playbook improvement, and threat-informed response actions.

• Bachelor2 in cybersecurity, computer science, forensics, or related field.
• Minimum 3 years of experience in incident response, cyber defense, security analysis, or digital forensics.
• Knowledge of endpoint, network, and log analysis techniques.
• Experience using SIEM, EDR, case management, and forensic analysis tools.
• Strong technical documentation and analytical skills.

• GCFA, GCIH, GCFE, CySA+, or Security+

• Ability to obtain and maintain required federal suitability/public trust clearance.
• Availability to support incident surge operations when needed.