FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Cybersecurity Incident Response, Digital Forensics Specialist
Softthink Solutions. Conduct rapid cybersecurity incident triage, forensic investigations, and security assessments .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in cybersecurity incident response, digital forensics, and security investigations, with a strong understanding of vulnerability exploitation and incident response processes. Proficient in analyzing security logs and preparing technically defensible investigation reports while ensuring compliance with federal cybersecurity requirements.
Highest-signal resume keywords
Cybersecurity Incident ResponseDigital ForensicsVulnerability ExploitationSIEM AnalysisNIST SP 800-61 Compliance
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Incident TriageForensic InvestigationsSecurity AssessmentsDigital Evidence PreservationTechnical DocumentationVulnerability ScanningCloud Security AnalysisEndpoint Security AnalysisNetwork Security AnalysisAuthentication Analysis
Soft Skills
Analytical SkillsTroubleshooting SkillsCommunication Skills
Tools & Technologies
SIEMEDRWindows Operating SystemLinux Operating SystemCloud Audit Logs
Certifications & Qualifications
GCIHGCFAGCFEGCFRCISSP
Industry Keywords
CISA KEV CatalogNIST SP 800-86Federal Cybersecurity PracticesIncident Response PlansChain-of-Custody Documentation
Tech Stack
Tools & technologiesCloudCyber SecurityLinux
About the role
Key responsibilities & impact- Conduct rapid cybersecurity incident triage, forensic investigations, and security assessments
- Investigate CISA Known Exploited Vulnerabilities Catalog entries and assess potential exploitation
- Analyze endpoint, network, application, authentication, SIEM, EDR, vulnerability scanning, and cloud audit logs
- Perform forensic investigations into persistence, privilege escalation, lateral movement, command-and-control communications, and potential data exposure
- Collect, preserve, analyze, and document digital evidence following NIST SP 800-86 and forensic evidence-handling practices
- Develop incident response plans and recommend containment, eradication, recovery, and risk mitigation strategies
- Collaborate with cybersecurity teams, system administrators, cloud engineers, and stakeholders
- Escalate security compromises and provide actionable technical recommendations
- Prepare forensic investigation reports, incident timelines, technical findings, executive summaries, and remediation recommendations
- Support incident acknowledgment, forensic triage, daily status updates, and incident closeout documentation
- Maintain investigation records, evidence logs, chain-of-custody documentation, and technical artifacts
- Ensure incident response activities align with federal cybersecurity requirements, NIST guidance, and organizational security policies
Requirements
What you’ll need- US Citizen work authorization required
- 8+ years of professional experience in cybersecurity, information security, or related technical disciplines
- 5+ years of hands-on experience in cybersecurity incident response, digital forensics, or security investigations
- Demonstrated experience investigating cybersecurity incidents within enterprise or federal IT environments
- Strong understanding of vulnerability exploitation, incident response processes, and digital forensic methodologies
- Experience analyzing SIEM, EDR, endpoint, network, and cloud security logs
- Working knowledge of Windows and Linux operating systems, security architecture, and common attack techniques
- Familiarity with the CISA KEV Catalog, NIST SP 800-61, NIST SP 800-86, and federal cybersecurity practices
- Experience preserving digital evidence and preparing technically defensible investigation reports
- Strong analytical, troubleshooting, technical documentation, and communication skills
- Ability to respond to urgent cybersecurity incidents and work within accelerated investigation timelines
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent professional experience is listed as a preferred qualification
- Preferred certifications include GCIH, GCFA, GCFE, GCFR, CISSP, or other relevant cybersecurity certifications
Benefits
Comp & perks- Cutting-edge technology, training, and career guidance
- Opportunities to work with leading multinational clients
- Established methodologies, processes, and mentoring
- Opportunities to work with specialized services and advanced IT solutions
- Continuous learning opportunities
- Access to a growing R&D division exploring the latest technological developments