Cybersecurity Forensics Analyst - Expert

Huntington National Bank•Columbus, OH

1d•Onsite

About The Position

The Cybersecurity Forensics Analyst - Expert uses Huntington’s enterprise eDiscovery and forensics tools to conduct investigations and respond to information security incidents. As a member of the Digital Forensics & Incident Response (DFIR) team, the analyst performs forensic investigations and Computer Incident Response Team (CIRT) functions, coordinating with fellow analysts to address incidents and investigations promptly. The role works closely with the Cybersecurity Operations Center, Insider Threat team, Corporate Security, Human Resources, and Legal to analyze forensic evidence, support litigation, and respond to cybersecurity incidents. This is an onsite position available at any Huntington Corporate office location listed on the posting. The position provides after-hours on-call incident support on a rotating four-week basis, subject to change. It is exempt from overtime pay. The annual base compensation range is $70,000–$140,000, with eligibility to participate in an applicable incentive compensation plan. Huntington also offers health insurance, a wellness program, life and disability insurance, a retirement savings plan, paid leave programs, paid holidays, and paid time off.

Requirements

At least 5 years of experience in a forensics or eDiscovery role.
A bachelor’s degree or at least 4 additional years of professional forensics and/or adjacent cybersecurity experience.
Strong troubleshooting and problem-solving skills.

Nice To Haves

Experience with enterprise eDiscovery or forensics tools and/or Insider Threat monitoring tools.
Experience with Guidance/OpenText Enterprise EnCase, AccessData Forensic Toolkit, or similar solutions deployed enterprise-wide.
Hands-on experience implementing or operating security tools such as SIEM, DLP, IPS, anti-malware, and firewalls.
Experience documenting and maintaining procedures and runbooks.

Responsibilities

Serve as an expert in forensic investigations and liaise with Legal, Corporate Security, Human Resources, and other areas needing investigative or eDiscovery assistance.
Advise lawyers and investigators on the relevance of data to a case or investigation.
Testify in court or litigation-related proceedings regarding findings for internal investigations, if required.
Investigate reports of suspicious activity and analyze evidence to establish who, what, when, and how aspects of incidents.
Use corporate forensic tools and investigative methods to discover, process, and preserve emails and documents that may be needed for litigation, including internet-use history, user-created data, images, and other files.
Work with internal and external counsel, Corporate Security, and Human Resources to provide reports for legal or investigative purposes.
Maintain the chain of custody for evidence, including computers, thumb drives, CDs, DVDs, backup tapes, smartphones, tablets, and cameras.
Use file recovery programs to search for and restore deleted data.
Track and report metrics related to the forensics workload.
Work with vendors to understand product roadmaps and plan upgrades.
Provide after-hours on-call incident support on a rotating four-week basis, subject to change.
Document and maintain procedures and runbooks, and update support documents as appropriate.
Review technical and procedural documentation for systems and solutions for completeness and accuracy.
Provide input to architecture and technology teams on tools, processes, and requirements for forensic investigations and eDiscovery matters.
Maintain current knowledge of hardware, software, and network technology and recommend modifications as required.
Comply with the organization’s cybersecurity policies and procedures.