Senior Associate, Digital Forensics and Incident Response (DFIR) Job at Confidential, Chicago, IL

MURwUjB5c3N4Y21qa0ZjTGZJTnM2MjFzNkE9PQ==
  • Confidential
  • Chicago, IL

Job Description

Overview

A leading tech-enabled digital intelligence, investigation, and risk advisory firm is looking to appoint a Senior Associate, Digital Forensics and Incident Response (DFIR).

The firm is seeking a dynamic new team member to help grow its Digital Forensics & Incident Response (DFIR) services. The firm has built a world class DFIR capability over the past several years and is looking to hire a Senior Associate with experience from the public and/or private sector to build on the teams success and help it innovate.

Key Responsibilities

  • Leading and/or supporting investigations into cybersecurity incidents, including ransomware, data breaches, and insider threats.
  • Performing incident triage, forensic analysis, malware examination, and log review to identify the root cause and scope of compromise.
  • Conducting forensic imaging and analysis of endpoints, servers, cloud environments, and mobile devices.
  • Preserving and analyzing digital evidence in line with legal and regulatory requirements.
  • Extracting, correlating, and interpreting data from multiple sources to reconstruct attack timelines.
  • Documenting methodologies and findings to support potential litigation, regulatory inquiries, or internal reviews.

Skills, Knowledge & Experience

  • Candidates will have approximately three (3) to five (5) years of experience in digital forensics, incident response, or a related field.
  • Strong technical background in digital forensics tools (e.g., Magnet Axiom, EnCase, FTK, Cellebrite, XWays, etc.) and incident response, EDR, and cybersecurity platforms, as well as cloud-based environments (M365, G-Suite, AWS, etc.).
  • Proficiency in handling a variety of operating systems (e.g., Linux, Windows, Mac, iOS, virtual machines, etc.) and file systems (e.g., FAT, NTFS, EXT, etc.). Must be familiar with digital evidence collection from a variety of sources.
  • Proficiency in data and log file analysis and analytics tools such as SQL, Python, Tableau, Splunk, and Excel.
  • Candidates must have exceptional communication, analytical, and interpersonal skills.
  • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Relevant Certifications

  • Certified Computer Examiner (CCE)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Incident Handler (GCIH)
  • Certified Forensic Computer Examiner (CFCE)
  • Other relevant certifications in DFIR or cybersecurity.

Job Tags

Similar Jobs

Confidential

Senior Structured Natural Gas Originator - EVERGREEN Job at Confidential

 ...What You Can Expect ENGIE Energy Marketing North America (EEMNA) is seeking a highly motivated and experienced Senior Structured Natural Gas Originator to join our growing team. This position sits in Houston, TX reporting to the Vice President of Structured Gas... 

Ballinger Group

Risk Analyst Job at Ballinger Group

 ...credit facilities to clients. Collaborate with other departments to gather necessary information for informed decision-making. ERM Policy and Procedure Development and Review. Assist in meeting DORA requirements throughout 2024 to ensure compliance with regulations... 

Technique Inc

Welder Job at Technique Inc

Technique is looking for a Welder to join our team at our Jackson, Michigan facility. This role requires the use of MIG/TIG welding equipment...  ...parts, industrial equipment, vibration, and loud noise ~ No travel required for this position ~ Must be eligible to work in the... 

Optum

Executive Director Home Care Job at Optum

Explore opportunities with Almost Family, a part of LHC Group, a leading post-acute care partner for hospitals, physicians and families nationwide. As members of the Optum family of businesses, we are dedicated to helping people feel their best, including our team members...

Serioplast

Plastic Extrusion Operator Job at Serioplast

 ...Serioplast , a Global Leader in Rigid Plastic Packaging , is Looking for a Injection Molding Technician for the plants in St. Louis, Missouri! Are you a professional technologist looking for an exciting opportunity to thrive in a fast-paced, global environment...