Lead Security Analyst; Digital Forensics and Incident Response

Position: Lead Security Analyst (Digital Forensics and Incident Response))
# Lead Security Analyst (Digital Forensics and Incident Response))
* Gartner
* ** Stamford, CT
** Hybrid
· Lead/Principal
· Full-time###

The Role This position leads digital forensic investigations spanning cybersecurity incidents, insider threats, HR matters and legal requests. Responsibilities include forensic acquisition and analysis of endpoints, cloud workloads, network data and volatile memory, plus developing playbooks, automation and defensible forensic reports.### Skills & Experience Requires 7+ years in DFIR, including senior leadership experience, scripting (Python/Power Shell), and tools such as Magnet, EnCase, Volatility, FTK, KAPE, Autopsy and Velociraptor.

Cloud forensics (AWS/Azure), EDR/SIEM/SOAR platforms, malware analysis and strong evidence handling practices are essential.### Who It Suits Ideal for an experienced forensic investigator ready to take a technical leadership role, mentor junior analysts, and work cross-functionally with legal, HR and security teams on high-priority, sensitive investigations.
This opening is for the Lead Security Analyst (Digital Forensics and Incident Response)) role at Forensic Focus.