Senior Cybersecurity – Digital Forensic Investigator

AT&T

. Conduct digital forensic investigations associated with cybersecurity incidents and suspicious activity .

Posted 9/18/2026full-timeCharlotte • North Carolina • United StatesSenior💰 $128,400 - $192,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Digital Forensics and Incident Response, with a strong ability to analyze and document findings from various digital environments. Proficient in utilizing advanced forensic methodologies and emerging technologies to enhance investigative processes and outcomes.

Highest-signal resume keywords

Digital ForensicsIncident ResponseCloud ForensicsTechnical Report WritingForensic Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Digital ForensicsIncident ResponseMemory ForensicsEndpoint InvestigationsCloud ForensicsLog AnalysisNetwork SecurityScripting and AutomationGenerative AI TechnologiesThreat Intelligence

Soft Skills

CollaborationIndependenceAccountabilityTime ManagementCommunication

Tools & Technologies

SIEM PlatformsEDR PlatformsWindowsLinuxMacOSPublic Cloud PlatformsAI TechnologiesTelecommunicationsNetwork InfrastructureHybrid Environments

Certifications & Qualifications

GCFAGCFEGCIHGNFAGCIACISSPEnCECFCE

Industry Keywords

CybersecurityDigital EvidenceChain of CustodyForensic ArtifactsInvestigative TechnologiesSecurity Control GapsEmerging ThreatsAttack TechniquesEnterprise InvestigationsCloud-Native Security

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityLinuxMacOSPython

About the role

Key responsibilities & impact

Conduct digital forensic investigations associated with cybersecurity incidents and suspicious activity
Collect, preserve, process, and analyze digital evidence while maintaining evidentiary integrity and chain of custody
Perform endpoint, memory, log, cloud, network, and live-response forensic analysis
Determine attack scope, affected assets, root cause, and extent of compromise
Reconstruct investigative timelines using forensic artifacts, telemetry, and log sources
Produce detailed technical reports and executive-level summaries documenting investigative findings
Collaborate with Incident Response, Threat Intelligence, Malware Analysis, platform teams, Legal, and other stakeholders during investigations
Support investigations involving on-premises, cloud, and hybrid environments
Utilize forensic findings to identify security control gaps and recommend improvements
Assist with the development and improvement of forensic processes, methodologies, automation, and tooling
Participate in an on-call rotation supporting time-sensitive investigations
Remain current on emerging threats, attack techniques, forensic methodologies, and investigative technologies
Evaluate and utilize emerging technologies, including artificial intelligence, to improve investigative efficiency and analytical effectiveness while understanding associated risks and limitations
Lead investigations from evidence collection through final reporting
Work directly with engineers, security teams, and business stakeholders
Handle multiple investigations with competing priorities
Operate with a high degree of independence and accountability
Support investigations that may require rapid response and extended collaboration during significant cybersecurity events

Requirements

What you’ll need

Minimum 3 years of experience in Digital Forensics, Incident Response, Cyber Threat Hunting, Security Operations, or a related cybersecurity discipline
Experience conducting investigations involving Windows, Linux, macOS, cloud platforms, or enterprise network environments
Experience analyzing forensic artifacts, logs, endpoint telemetry, and other investigative data sources
Experience documenting findings and preparing technical reports
Experience or working knowledge in Digital Forensics, Live Response, Memory Forensics, Endpoint Investigations, Cloud Forensics, Incident Response, Threat Intelligence, Malware Analysis Fundamentals, Log Analysis, Network Security and Protocols, SIEM Platforms, EDR Platforms, Windows, Linux, macOS, Public Cloud Platforms (AWS and Azure), Scripting and Automation (Python, PowerShell, Bash, or similar), Identity and Access Management, Web Applications and APIs, Security Vulnerabilities and Attack Techniques, and Generative AI technologies
Applicants should be comfortable leveraging AI as a productivity and analytical tool while maintaining human validation of investigative conclusions
Industry certifications such as GCFA, GCFE, GCIH, GNFA, GCIA, CISSP, EnCE, CFCE, or equivalent are preferred
Experience supporting large-scale enterprise investigations is preferred
Experience with cloud-native security investigations is preferred
Experience supporting investigations involving telecommunications, network infrastructure, or large distributed environments is preferred
Bachelor’s degree (BS/BA) desired in Computer Science or Cybersecurity
Certification is required in some areas

Benefits

Comp & perks

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone