Cyber Security / Digital Forensic Analyst

Job title : Cyber Security Digital Forensic Analyst / Digital Forensics Investigator

Job summary :

The Digital Forensic Analyst is responsible for conducting in-depth investigations into security incidents and cybercrimes. This role involves using forensic tools and methodologies to acquire, preserve, and analyze digital evidence from a wide array of devices and systems. The analyst will be critical in reconstructing attack timelines, determining the scope of breaches, and preparing detailed reports for technical and non-technical stakeholders, including legal teams.

Key responsibilities :

• Incident investigation : Lead and participate in digital forensic investigations related to cyberattacks, data breaches, malware infections, insider threats, and other security incidents.
• Evidence acquisition and preservation : Perform forensic imaging and data collection from various digital media, such as computers, mobile devices, servers, and cloud environments, while maintaining strict adherence to the chain of custody.
• Forensic analysis : Analyze digital evidence to uncover hidden, deleted, or encrypted files, reconstruct events, and determine the timeline and methods of a cyber incident.
• File system analysis : Analyze file systems (e.g., NTFS, FAT32, APFS) to recover and examine artifacts.
• Network forensics : Analyze network traffic, logs, and security information and event management (SIEM) alerts to investigate network-based attacks.
• Memory forensics : Examine a system's volatile memory (RAM) to detect malicious processes and other artifacts.
• Reporting and documentation : Create detailed, comprehensive, and legally sound reports documenting the investigative process, findings, and conclusions for internal use or legal proceedings.
• Expert testimony : Provide expert testimony in legal proceedings, presenting and explaining complex technical findings to a non-technical audience, such as judges and juries.
• Tool proficiency : Utilize and maintain proficiency with industry-standard forensic tools such as EnCase, FTK, Autopsy, Cellebrite, Magnet AXIOM, and Volatility.
• Continuous learning : Stay up-to-date with emerging cyber threats, attack techniques, forensic methodologies, and evolving technologies.
• Collaboration : Work closely with incident response teams, law enforcement, legal counsel, and internal departments to support investigations and remediation efforts.

Qualifications :

Technical skills :

Certifications (preferred)

1. GIAC Certified Forensic Analyst (GCFA)

2. GIAC Certified Forensic Examiner (GCFE)

3. EnCase Certified Examiner (EnCE)

4. Certified Computer Examiner (CCE)

5. Certified Hacking Forensic Investigator (CHFI)

6. Certified Information Systems Security Professional (CISSP)

Soft skills :

(ref : hirist.tech)