The Role
This position leads forensic examinations during ransomware and compromise investigations, analysing operating system artifacts, deleted data, and memory across Windows, Linux, and Mac systems.
The analyst reviews network and log data, collaborates with SOC teams, and produces clear investigative reports and timelines for stakeholders.
Skills & Experience
Requires strong knowledge of disk and memory forensics, network traffic analysis, and tools such as EnCase, Axiom, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, and Wireshark.
Relevant certifications include GCFE, GCFA, GCIH, CEH, or CHFI, plus several years of incident response or forensic experience.
Who It Suits
Ideal for an experienced forensic analyst comfortable leading investigative teams, handling sensitive data, and communicating technical findings clearly to legal counsel and non-technical stakeholders in a remote working environment.
#J-18808-LjbffrSenior Analyst, Forensics – Remote in workfromhome at Unknown Company
This position is listed as full time and able to be worked remotely.