Investigator, AI Developer

ManpowerGroup Talent Solutions

. Conduct complex forensic investigations including advanced memory forensics, malware triage, encrypted artifact recovery, and anti-forensics detection .

Posted 10/15/2026full-timeRemote • Wisconsin • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Digital Forensics and Incident Response (DFIR), with a strong focus on advanced memory forensics, malware analysis, and the development of forensic tools. Proficient in leveraging cloud platforms and AI technologies to enhance investigation workflows and deliver comprehensive, defensible reports.

Highest-signal resume keywords

Digital ForensicsIncident ResponseMemory ForensicsPython DevelopmentThreat Hunting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Advanced Memory ForensicsMalware AnalysisData AnalysisLog AnalysisPythonPowerShellSQLDFIR ToolsetsCloud ForensicsAI Coding Assistants

Soft Skills

CollaborationCommunicationProblem-SolvingReport WritingStakeholder Engagement

Tools & Technologies

AWSAzureGCPVolatilityX-WaysFTKEnCaseAutopsyPower BIPower Apps

Industry Keywords

Cybersecurity ConsultingIncident Response FrameworksActive DirectoryOT/ICS EnvironmentsGenerative AI

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformLinuxMacOSPythonSQL

About the role

Key responsibilities & impact

Conduct complex forensic investigations including advanced memory forensics, malware triage, encrypted artifact recovery, and anti-forensics detection
Perform host and network digital forensics, log analysis, and threat hunting in support of incident response engagements
Leverage EDR solutions, cloud platforms (AWS, Azure, GCP), and threat intelligence to identify and document attacker TTPs
Participate in incident response across cloud, OT, and traditional enterprise environments
Develop indicators of compromise and contribute to comprehensive, defensible attack timelines
Design and build proprietary investigation tools, automation scripts, and data products that accelerate forensic workflows and improve team consistency
Translate repeatable investigation processes into functional prototypes using AI-assisted development, low-code platforms, and data visualization tools
Apply generative AI and AI coding assistants to reduce manual effort across triage, analysis, and reporting
Govern tools through documentation, version control, onboarding guides, and iteration based on engagement feedback
Collaborate with senior practitioners to identify tooling improvements
Interface with client stakeholders and legal counsel throughout the engagement lifecycle
Author comprehensive, defensible written reports on investigative findings
Present technical findings and tool outputs on client calls
Support leadership in scoping engagements with methodical, innovative approaches

Requirements

What you’ll need

Bachelor’s Degree or equivalent work experience
Minimum of 3 years’ experience in DFIR with demonstrated expertise in complex investigations
Minimum of 3 years’ experience in cybersecurity consulting and data-oriented development or analysis
Minimum of 3 years’ experience building tools that others use in professional practice
Minimum of 3 years’ experience with at least one data or development layer: Python, PowerShell, Power BI, Power Apps/Automate, SQL, or comparable stack
Minimum of 3 years’ experience with common DFIR toolsets (Volatility, X-Ways, FTK, EnCase, Autopsy, etc.)
Minimum of 3 years’ experience with Microsoft Windows, GNU/Linux, and MacOS operating systems
Minimum of 3 years’ experience with memory forensics
Minimum of 3 years’ experience with enterprise environments, Active Directory, and common attack patterns
Minimum of 3 years’ experience with threat hunting on both endpoints and networks
Minimum of 3 years’ experience with industry recognized incident response lifecycles and frameworks (e.g., SANS, NIST, MITRE, etc.)
Minimum of 3 years’ experience producing accurate, defensible, well-documented analysis
Minimum of 1 year’ experience using AI coding assistants and generative tools as a fluent part of everyday development workflow
Minimum of 1 year’ experience with Azure and cloud-native architectures; comfort using AI as a development accelerator
Experience with cloud forensics across AWS, Azure, and GCP; OT/ICS environments a plus
Malware analysis capabilities: unpacking, deobfuscation, behavior analysis, reverse engineering
Experience with AI governance, responsible use frameworks, or tool validation in a security or consulting context