Senior Analyst Investigations and Forensics
Skills
CellebriteChroniclesMagnet AXIOMCellebrite Endpoint CollectorCellebrite Endpoint InvestigatorSumuri ReconCrowdStrike Falcon
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 7+ years in digital forensics cybersecurity investigations or related discipline
- Experience with insider threat data exfiltration and employee misconduct investigations
- Proficiency with Magnet AXIOM Cyber Cellebrite Endpoint Collector Endpoint Investigator and Sumuri Recon
- Knowledge of forensic imaging standards acquisition methods write-blocking hash verification and chain of custody
- Hands-on experience with CrowdStrike Falcon for behavioral analysis and forensic artifact review
- Working knowledge of Microsoft 365 forensics Azure AD Purview Compliance and MDE
- Solid understanding of Windows and macOS endpoint artifacts and event logs
- Working knowledge of cloud and SaaS investigation including OAuth SAML conditional access and audit trails
- Familiarity with DNS proxy VPN and firewall log analysis
- Proficiency in Google SecOps Chronicle YARA-L for investigation and threat hunting
- Experience with JAMF Intune or SCCM for device attribution and asset profiling
- Ability to produce legally defensible executive-quality reports
- Experience supporting eDiscovery legal hold and ESI collection
- Experience working with Legal HR or Ethics functions
- Incident response methodology experience including triage scoping containment and post-incident analysis
- Proficiency in Google SecOps Chronicle and Splunk SPL
- Familiarity with Zscaler proxy logs and CASB telemetry
- Prior testimony or declarations in legal arbitration or regulatory proceedings
- Relevant certifications such as GCFE GCFA EnCE CFCE CISSP or equivalent
Nice to have
- Independent judgment
- Precision
- High integrity
- Technical depth
- Strong communication
- Executive presence
Day to day
- Lead end-to-end digital forensic investigations across endpoint cloud email identity and SaaS environments
- Analyze insider threat data exfiltration IP theft fraud employee misconduct and ethics cases with strong independence
- Support high-severity security incidents by establishing attribution root cause and precise forensic timelines
- Produce executive-quality reports with legally defensible findings for HR legal litigation and regulatory needs
- Contribute to proactive detection development forensic tooling and AI-enabled investigative workflows