Digital Forensics and Incident Response Analyst
FRSecure
Posted: 10/20/2026CloudFirewalls
Senior Cybersecurity Incident Handler
General Motors
Posted: 10/17/2026Cyber SecurityPython
Malware Defense Endpoint Analyst, Incident Response
Bank of America
Posted: 10/8/2026AWSAzureCloudGoogle Cloud PlatformJavaScript
Malware Defense Endpoint Analyst, Incident Response
Bank of America
Posted: 10/8/2026AWSAzureCloudGoogle Cloud PlatformJavaScript
Senior Cybersecurity Incident Response Analyst
Tenet Healthcare
Posted: 10/6/2026CloudCyber SecuritySplunk
Principal Incident Response Analyst
North
Posted: 10/6/2026AWSAzureCloudGoogle Cloud PlatformLinuxPythonSplunk
Incident Response Analyst II
WGU Advancement
Posted: 10/5/2026AWSCloudFirewallsPython
Senior Analyst, Cyber Incident Response
Norton Rose Fulbright
Posted: 9/29/2026PythonSQL
Junior Cyber Incident Response Analyst
Cayuse Holdings
Posted: 9/24/2026ServiceNow
Principal Cybersecurity – Incident Response Analyst
AT&T
Posted: 9/18/2026AWSAzureCloudCyber SecurityLinuxMacOSPythonSplunk
Incident Response Analyst
Thrive
Posted: 9/17/2026CloudDNSLinuxSMTPSwitchingTCP/IPUnix
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in incident response, threat hunting, and cyber forensics, with a strong ability to communicate complex security concepts to diverse audiences. Proven experience in managing security technologies and providing client-focused solutions in information security.
Highest-signal resume keywords
Incident ResponseThreat HuntingActive Directory AdministrationEDR ManagementCustomer Service Skills
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Provide support to clients who have become or suspect they may be victims of cyber-attacks
- Conduct timely incident response investigations across environments with varying security maturity
- Identify and contain malware and malicious intruders
- Advise clients on recovery and remediation steps to return to normal business operations
- Lead tabletop exercises and plan coaching
- Conduct forensic reviews of client systems for artifacts and indicators of compromise
- Perform triage, threat hunting, and case management for incident response clients
- Document evidence and findings and create report outputs
- Meet with clients during planning, information sharing, and technical support stages
- Create and deliver proactive projects, including tabletop exercises, plan coaching, and assessments
- Consult with clients on incident response programs
- Research developments in cyber forensics and attack methodologies and expand skills
- Attend and participate in regular internal meetings
- Participate in the on-call rotation, monitor CSIRT requests, answer after-hours hotline calls, perform incident triage, adhere to SLAs, and resolve issues within established times
- Work standard hours of 8:00am-5:00pm in the employee's time zone, with occasional work outside those hours and on-call duties
- Travel occasionally for conferences, on-site client projects, and team or company activities
Requirements
What you’ll need- 3-5 years of information security experience
- 3-5 years of experience with Active Directory, Systems Administration, Exchange Administration, M365 and/or other cloud environments
- 3-5 years of experience presenting information security concepts
- Prior experience in threat hunting and/or incident handling
- Prior experience managing EDR and/or SIEM technologies
- Experience with firewalls and network device best practices and logging
- Solid understanding of computer systems administration in large environments
- Demonstrated analytical skills to interpret data, identify trends, and ensure accuracy in deliverables
- Ability to clearly convey complex information to diverse audiences and actively listen to understand needs and provide effective solutions
- Proven customer service skills and a customer-focused mindset, including relationship building, issue resolution, and responsive client experience
- Ability to communicate highly technical topics to non-technical people effectively
- Ability to handle and work with large amounts of data
- Proficient with all Microsoft Office Suite products
- GCIH, GCFA, and ECIH certifications preferred
- Must be located in one of the eligible U.S. states; only candidates located in the United States will be considered
- Ability to participate in on-call rotation, including after-hours and weekend work
Benefits
Comp & perks- Flexible schedules and remote or hybrid work options
- Employee Assistance Program (EAP)
- Mental wellbeing support and sustainable work practices
- Ongoing learning opportunities and professional development support
- Medical, dental and vision insurance
- Health savings, flexible savings and dependent care savings account options
- Life and disability insurance
- 401(k) with employer match up to 4%
- Pet insurance
- Unlimited paid time off
- Paid parental leave: 6 weeks of 100% regular, straight time weekly pay for non-birthing parents and 12 weeks for birthing parents
- 11 paid holidays
- Volunteer time off
- Minimal travel, typically less than 5-10%
- Reasonable accommodations during the hiring process
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Information Security ExperienceSystems AdministrationMalware IdentificationForensic ReviewsData Analysis
Soft Skills
Effective CommunicationAnalytical SkillsRelationship BuildingActive ListeningProblem Solving
Tools & Technologies
SIEM TechnologiesFirewallsMicrosoft Office SuiteM365Cloud Environments
Certifications & Qualifications
GCIHGCFAECIH
Industry Keywords
Cyber-AttacksIncident HandlingTriageMalicious IntrudersIndicators of Compromise