FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in incident response and digital forensics, with a strong ability to analyze security incidents from detection to resolution. Proficient in technical writing and collaboration with cross-functional teams to ensure effective incident management and reporting.
Highest-signal resume keywords
Incident Response ExperienceDigital Forensics ExpertiseEndpoint Detection And Response ToolingSecurity Certifications (GCIH, GCFA, OSCP)Scripting Experience (Python, PowerShell)
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Incident ResponseDigital ForensicsSecurity OperationsLog Forensic AnalysisRoot Cause AnalysisTechnical Report WritingMalware TriageNetwork Traffic AnalysisCloud Audit LoggingSIEM Query Languages
Soft Skills
Analytical Problem-SolvingCalm Under PressureFlexibilityCollaborationCommunication
Tools & Technologies
Digital Forensics ToolingEndpoint Detection And ResponseLog AggregationCloud Platforms (Azure, AWS, M365)Incident Response Playbooks
Certifications & Qualifications
GCIHGCFAGCFEGNFAOSCP
Industry Keywords
CybersecurityThreat HuntingData Loss PreventionPrivacy InvestigationsApplication Security
Tech Stack
Tools & technologiesAWSAzureCloudPython
About the role
Key responsibilities & impact- Perform deep-dive analysis of escalated alerts and suspected incidents across endpoint, identity, email, network, and cloud telemetry
- Reconstruct attacker and user activity into defensible timelines
- Determine the scope of compromise, including affected accounts, systems, and data
- Establish root cause and distinguish confirmed findings from assumptions
- Recommend and support containment actions such as account disablement, host isolation, credential resets, and access revocation
- Work with IT and platform owners to execute eradication and recovery steps
- Validate containment and confirm no attacker access or persistence remains before closure
- Capture technical remediation items for tracking to closure
- Collect and preserve digital evidence using sound handling and chain-of-custody practices
- Conduct host and log forensic analysis for security, HR, Legal, and privacy investigations
- Analyze suspicious files, email, and indicators to determine intent and impact
- Produce technical reports suitable for legal, regulatory, and audit scrutiny
- Maintain and improve technical response playbooks, tooling, and evidence collection procedures
- Feed incident findings to threat hunting and detection engineering
- Contribute technical detail to post-incident reviews
- Support tabletop and ransomware exercises
- Coordinate with the Incident Response Manager, IT, platform owners, and other stakeholders
Requirements
What you’ll need- 3 to 5+ years of hands-on experience in incident response, digital forensics, or security operations
- Undergraduate degree, preferably in Information Security, Computer Science, Information Technology, or a related discipline
- Demonstrated experience investigating security incidents end to end, from initial alert through root cause and closure
- Working knowledge of attacker tradecraft and a common framework for describing it
- Knowledge of operating system, identity, and cloud internals needed for investigations
- Practical experience with endpoint detection and response tooling, log aggregation and SIEM query languages, and cloud audit logging
- Strong technical writing skills
- Ability to work calmly and methodically under time pressure
- Flexibility to extend beyond scheduled hours when an active incident requires it
- Willingness to work US business hours as needed
- Security certifications such as GCIH, GCFA, GCFE, GNFA, OSCP, or similar preferred
- Experience with digital forensics tooling, including memory and disk analysis preferred
- Scripting experience with Python, PowerShell, or KQL preferred
- Exposure to malware triage or reverse engineering fundamentals preferred
- Experience supporting insider risk, DLP, or privacy investigations preferred
- Working knowledge of network protocols and traffic analysis preferred
- Familiarity with cloud platform architecture and native logging across Azure, AWS, or M365 preferred
- Understanding of application and web security fundamentals preferred
- Experience working across time zones with distributed, cross-functional teams preferred
- Analytical problem-solving skills preferred
Benefits
Comp & perks- Flexible work arrangement (hybrid)
- Opportunity to work with a global consulting organization
- Collaboration with cross-functional teams across IT, GRC, HR, Legal, and business units
- Exposure to security, HR, Legal, privacy, regulatory, and audit investigations