Security Spec Lead – Digital Forensics Analyst

American Electric Power

. Conduct end-to-end investigations of internal and external matters .

Posted 10/9/2026full-timeUnited StatesSenior💰 $116,255 - $151,133 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Digital Forensics, including evidence collection, analysis methodologies, and incident response processes. Proficient in conducting technical investigations, risk assessments, and providing mentorship in cross-functional environments.

Highest-signal resume keywords

Digital ForensicsMalware Reverse EngineeringIncident ResponseSecurity Monitoring ToolsForensic Tools

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Windows Operating SystemLinux/Unix Operating SystemMacOSAndroidIOSMobile Device ForensicsAnomalous User Activity MonitoringData Loss Prevention (DLP)Programming LanguagesSplunk Query Development

Soft Skills

Analytical SkillsCritical ThinkingCommunication SkillsConfidentialityMentorship

Tools & Technologies

Forensic ToolsSIEM PlatformsEndpoint Detection SolutionsCloud ForensicsIncident Response Tools

Certifications & Qualifications

SANS Forensics CertificationsCHFIGCIH

Industry Keywords

Insider ThreatCyber InvestigationsICS/SCADACritical Infrastructure ProtectionNERC CIP

Tech Stack

Tools & technologies

AndroidCloudiOSLinuxMacOSSplunkUnix

About the role

Key responsibilities & impact

Conduct end-to-end investigations of internal and external matters
Prepare findings reports for HR, Legal, Ethics, Physical Security, and other stakeholders
Develop and maintain Digital Forensics policies and procedures documentation
Support risk-reduction projects, including post-incident lessons learned
Serve as a technical SME for Insider Threat, DLP, and cyber investigations
Produce clear investigative and analytic reports for technical and executive audiences
Maintain tools and technologies pertaining to Digital Forensics collection and analysis
Provide direction, mentorship, and functional/technical work guidance to team members
Lead security controls assessments through application security testing, penetration testing, or other means
Lead identification and documentation of mitigations/remediations and reporting of findings with risk response
Support conceptual design and advanced implementation of technical security solutions

Requirements

What you’ll need

Ability to obtain and maintain a U.S. government security clearance
In-depth understanding of Windows, Linux/Unix, MacOS, Android and iOS operating systems and interconnected network devices
Understanding of mobile device forensics and evidence collection techniques
Experience with malware reverse engineering and analysis
Understanding of anomalous user activity monitoring and policy violation investigations
Ability to use internal and external log sources, forensic tools, and established investigative methods to determine incident source and scope
Work independently while maintaining strict confidentiality throughout investigations
Communicate clearly, verbally and in writing, with strong analytical and critical-thinking skills
Handle sensitive and confidential material appropriately
Understanding of forensic capture and analysis methodologies and evidence chain of custody procedures
Bachelor's degree OR Associate's degree with 2 years relevant experience OR High School Diploma/GED with 4 years relevant experience
7 or more years of Information Technology related experience OR 5 or more years of security related experience
Experience with standard forensic methods and leading collection and analysis tools
Deep experience conducting technical investigations or root cause analysis in complex environments
Experience identifying insider risk indicators through analytics tools
Understanding and experience with digital forensics in a cloud environment
Understanding of threat actor tactics, techniques, and procedures
Familiarity with electric utility operations, ICS/SCADA, or critical infrastructure protection frameworks such as NERC CIP
Working knowledge of programming languages and Splunk query development
Ability to apply AI to threat detection and analysis
Understanding and experience with security monitoring tools, SIEM platforms, and endpoint detection solutions
Ability to work and lead in cross-functional environments involving HR, Legal, Compliance, Privacy, and Security teams
Knowledge of cyber investigations and incident response processes
Experience with case management and evidence handling procedures
Experience with data classification, information protection, data loss prevention (DLP), and sensitive data monitoring technologies
Preferred certifications/courses include SANS Forensics Certifications, CHFI, GCIH, and vendor-specific certifications for leading forensics tools

Benefits

Comp & perks

Annual bonus
Long-term incentive
401(k) match
AEP Pension
Comprehensive benefits package designed to support and enhance the overall well-being of employees.