Lead Security Analyst – Digital Forensics and Incident Response
Gartner
Posted: 10/20/2026AWSAzureCloudCyber SecurityKubernetesLinuxMacOSPythonSplunk
Security Analyst
The Health Management Academy
Posted: 10/20/2026AzureCloudPython
Senior Security Analyst
Sola
Posted: 10/20/2026AWSFirewallsJavaScriptLinuxNode.jsPython
Senior Security Analyst
Ensono
Posted: 10/20/2026AzureCloudCyber SecurityDNSFirewallsPythonSQLTCP/IP
Cloud Security Analyst
InvestCloud, Inc.
Posted: 10/20/2026AWSAzureCloudFirewallsKubernetesTerraform
IT Security Analyst
DecisionPoint Corporation
Posted: 10/20/2026Cyber Security
Senior Cybersecurity Analyst
Law School Admission Council (LSAC)
Posted: 10/20/2026AzureCloudCyber SecurityFirewallsTCP/IPVault
Lead Analyst – Cyber Security Operations
Hyatt
Posted: 10/20/2026CloudCyber SecurityFirewallsPythonSQLTCP/IP
Analyst, Security Technology
S&P Global
Posted: 10/20/2026
Industrial Security Analyst – Top Secret
Xcelerate Solutions
Posted: 10/20/2026
Security Analyst
AVANT Communications
Posted: 10/20/2026
Security & Network Analyst II
The Jackson Laboratory
Posted: 10/19/2026AWSAzureCloudCyber SecurityDNSFirewallsITSMPythonSQL+2 more
IT Security Analyst
Epicor
Posted: 10/19/2026AWSAzureCloudCyber SecurityDNSLinuxPythonSplunkTCP/IP
Intermediate Cybersecurity Analyst – Splunk
General Dynamics Information Technology
Posted: 10/16/2026CloudCyber SecurityFirewallsMS SQL ServerOracleSplunkSQL
Cybersecurity Analyst II
Frontgrade Technologies
Posted: 10/16/2026Cyber SecurityIoTLinuxPython
Cybersecurity Analyst – AI Focus
GuideWell Source
Posted: 10/16/2026AWSAzureCloudCyber SecurityFirewallsTCP/IP
Principal Security Compliance Analyst – FedRAMP
Entrust
Posted: 10/16/2026Cloud
Senior Information Security Analyst
Planned Parenthood Federation of America
Posted: 10/16/2026CloudCyber Security
Physical Security Analyst
Peraton
Posted: 10/16/2026
Security Analyst Internship
OpenSesame
Posted: 10/16/2026AWSCloud
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in digital forensics and incident response, with a strong focus on forensic acquisition, analysis, and reporting. Proficient in leveraging advanced tools and methodologies to enhance investigative efficiency and ensure compliance with legal standards.
Highest-signal resume keywords
Digital ForensicsIncident ResponsePython ScriptingCloud ForensicsEvidence Handling
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Lead digital forensic investigations involving cybersecurity incidents, insider threats, human resources matters, legal requests, and regulatory inquiries
- Conduct forensic acquisition and analysis of endpoints, cloud workloads, network artifacts, log data, and volatile system evidence
- Develop and maintain DFIR playbooks and standard operating procedures meeting legal and evidentiary standards
- Perform advanced log analysis across multiple data sources to establish timelines, identify root cause, and validate findings
- Develop automation and tooling to improve investigative efficiency and evidence collection
- Identify improvements to detection, response, forensic readiness, and evidence preservation
- Mentor junior investigators and contribute to Gartner's DFIR program maturity
- Produce clear and defensible forensic reports for internal stakeholders, auditors, legal counsel, and executive leadership
- Collaborate with Security Operations, Threat Intelligence, Legal, Human Resources, Privacy, Compliance, and Engineering teams
- Serve as technical leader for investigations involving advanced threats, insider risk, legal and regulatory matters, and high-priority security events
Requirements
What you’ll need- Bachelor's degree in Computer Science, Cybersecurity, Digital Forensics, related fields, or equivalent practical experience
- 7+ years of experience in digital forensics and incident response, including at least 2 years in a senior or lead capacity
- Experience leading complex incident response investigations
- Experience using Python, PowerShell, or similar scripting languages
- Hands-on experience with Magnet Forensics, EnCase, Volatility, MemProcFS, FTK, KAPE, UAC, Autopsy/Sleuth Kit, Velociraptor, or equivalent platforms
- Experience with cloud forensics in AWS and Azure, including cloud-native services and Kubernetes/containerized workloads
- Strong hands-on experience in Windows, macOS, Linux, and memory forensics
- Proficiency with EDR/XDR, SIEM and SOAR platforms, including Splunk, Microsoft Sentinel, and Athena
- Experience with network forensics tools including Zscaler, ExtraHop, and Wireshark
- Experience in log analysis
- Experience performing malware analysis, reverse engineering, and threat hunting
- Excellent written and verbal communication skills
- Experience running insider threat or HR/Legal-driven investigations
- Strong command of evidence handling, chain of custody, forensically sound acquisition, live response, and remote collection
- Relevant industry certifications such as GCFA, GCFE, GNFA, GCIH, GREM, EnCE, or equivalent are advantageous
- Experience supporting legal, eDiscovery, compliance, privacy, or regulatory investigations
- Experience leveraging AI/LLMs in DFIR investigations
- Familiarity with AI-related security incidents or emerging technology risks
- Experience building custom forensic utilities, maintaining research projects, contributing to open-source tools, or publishing technical content
- Advanced experience integrating forensic, SIEM, EDR, and cloud security platforms through APIs and automation
Benefits
Comp & perks- Competitive compensation
- Limitless growth and learning opportunities
- Ongoing mentorship and apprenticeship
- Leadership courses, development programs, technical courses, and certification opportunities
- Collaborative and positive culture
- Flexible working from home and collaboration in dynamic offices
- 20+ PTO days plus holidays and floating holidays in the first year
- Extensive medical, dental, and vision insurance
- 401K with corporate match and immediate vesting
- Health-and-wellness-related allowance programs
- Parental leave
- Tuition reimbursement
- Employee Stock Purchase Plan
- Employee Assistance Program
- Gartner Gives Charity Match
- Annual bonus plan based on company and individual performance or role-based, uncapped sales incentive plan
- 401k match up to $7,200 per year
- Opportunity to purchase company stock at a discount
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Digital ForensicsIncident ResponseLog AnalysisMalware AnalysisMemory ForensicsNetwork ForensicsAutomation DevelopmentThreat HuntingForensic AcquisitionAdvanced Threat Investigation
Soft Skills
Excellent CommunicationMentoringCollaboration
Tools & Technologies
Magnet ForensicsEnCaseSplunkMicrosoft SentinelAWSAzureKubernetesZscalerWiresharkVolatility
Certifications & Qualifications
GCFAGCFEGCIHGREMEnCE
Industry Keywords
CybersecurityDFIRComplianceEDiscoveryRegulatory InvestigationsChain of CustodyForensically Sound AcquisitionInsider ThreatsLegal RequestsPrivacy