Cybersecurity Forensic Examiner I

Banner Health

. Investigate and respond to escalated security incidents .

Posted 9/21/2026full-timeRemote • United StatesJuniorMid-Level💰 $35 - $59 per hourWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity incident response, digital forensics, and compliance with cybersecurity laws. Proficient in coordinating cross-functional teams and managing security incidents while providing technical guidance and operational support.

Highest-signal resume keywords

Cybersecurity Incident ResponseDigital ForensicsEnCase Certified Examiner (EnCE)Incident CoordinationSecurity Policy Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity AnalysisIncident DocumentationAccess Control TroubleshootingNetwork SecurityEndpoint SecurityEDiscovery OperationsLegal Preservation WorkflowsIndicators of Compromise DetectionRisk AssessmentsSecurity Posture Recommendations

Soft Skills

Cross-Functional CommunicationProject Workload BalancingCustomer Support

Tools & Technologies

Security SoftwareForensic CollectionsIncident Response Tools

Certifications & Qualifications

EnCase Certified eDiscovery Practitioner (EnCEP)Certified Computer Examiner (CCE)

Industry Keywords

Information TechnologyCybersecurity ControlsIncident Response ProceduresCompliance with Cybersecurity LawsDigital Forensics

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Investigate and respond to escalated security incidents
Coordinate teams and departments during security incidents
Lead technical analysis and discussions
Create incident documentation and communications
Advise on countermeasures and improve security analytics and alerts
Define incident response scope and objectives based on business needs and regulatory requirements
Perform cybersecurity analysis and design
Conduct investigations and legal preservation workflows
Troubleshoot access control, provisioning requests, network security, and endpoint security systems
Assess escalated security events and drive response actions to minimize business impact
Act as Incident Coordinator and Scribe for high-impact cyber breaches and advanced attacks
Support communications during cybersecurity incidents, recoveries, breaches, intrusions, and system abuses
Participate in security reviews, evaluations, tabletop exercises, risk assessments, and post-incident activities
Develop security posture recommendations
Document incident response activities, metrics, reporting, and lessons learned
Assist with alerts and Indicators of Compromise detection capabilities
Evaluate and develop security policies, procedures, and Incident Response documents
Provide technical expertise and operational support for security software
Manage and conduct eDiscovery operations, including legal preservation, litigation holds, forensic collections, and native file productions
Manage evidence documentation and chain-of-custody
Provide guidance and oversight for compliance with mandated cybersecurity laws, rules, and guidelines
Conduct cybersecurity, digital forensic examinations, and eDiscovery operations across multiple departments

Requirements

What you’ll need

Bachelor's degree or equivalent combination of relevant education, technical, business and healthcare experience
Certification within one year of entering the position: EnCase Certified Examiner (EnCE), EnCase Certified eDiscovery Practitioner (EnCEP), Certified Computer Examiner (CCE), or other certification designated by the Cybersecurity Leader
At least two years of experience in Information Technology, Cybersecurity, in a corporate or similar environment with Forensic knowledge or training
Strong knowledge of business, information security and/or computer science
Ability to communicate and interact across cross functional departments and facilities and at various levels
Ability to balance project workloads with customer support and on-call demands
Ability to work variable shifts and hours
Ability to carry/respond to a page may be required
Additional related certification preferred
Experience in cybersecurity controls, policies, and procedures preferred
Experience analyzing network activities, responding to anomalies, and reporting events preferred
Experience with level 1 incident response handling and addressing reported or detected incidents preferred
Digital forensics and incident response experience preferred
Additional related education and/or experience preferred

Benefits

Comp & perks

Health and financial security options
Variety of benefit plans for employees and families
Total Rewards package