Digital Forensics And Incident Response Analyst I

TEKsystems•Santa Ana, CA

6d•$30 - $35•Onsite

About The Position

This role serves as a primary liaison for forensics analysis tasks, including the analysis of digital media devices to identify, reverse engineer, and de-obfuscate content related to security incidents. The analyst will maintain the Digital Forensics Program for the SOC, driving routine process enhancements and upskilling the team on technical reports. Responsibilities also include supporting general SOC operational duties, augmenting cyber threat intelligence development, and identifying/implementing automation tasks within the SOC Forensics Program. The role involves researching, evaluating, and recommending new security tools, techniques, and technologies, and utilizing COTS/GOTS and custom tools to scan, identify, contain, mitigate, and remediate vulnerabilities and intrusions. The analyst will perform analyses to validate security requirements and recommend additional safeguards, occasionally providing briefings on forensics investigation results to experienced staff.

Requirements

Programming languages such as Python, C++, JavaScript
Evidence Acquisition for Chain of Custody process.
Demonstrated Host, Cloud, Identity, Network forensics experience.
Demonstrated packet capture, volatile memory, suspicious script analysis and forensics experience.
Physical Device Imaging software familiarty.
Digital Forensics Software familiarity.
IDS/IPS, Firewalls, and Anti-Virus/Anti-Malware technologies
Incident Response
Experience in analyzing security alerts via MS Sentinel Security Information and Event Management (SIEM) (experience with other SIEM tools would be acceptable).
Malware Analysis Technical Report writing.
Adherence to Standard Operating Procedures for the SOC.

Responsibilities

Act as the primary liason for forensics analysis tasks such as analysis of digital media devices to identify, reverse engineer and de-obfuscate content related to a security incident.
Upkeep and maintain the Digital Forensics Program for the SOC, including routine process enhancements and upskilling the team on drafted technical reports.
Support SOC with general SOC Operational Duties such as security incidents for networks and systems.
Augment cyber threat intelligence development and reporting generated from forensics investigations.
Support routine identification, development and implementation of automation tasks surronding the SOC Forensics Program.
Research, evaluate, and recommend new security tools, techniques, and technologies and introduces them to the enterprise in alignment with IT security strategy.
Utilizes COTS/GOTS and custom tools and processes/procedures to scan, identify, contain, mitigate and remediate vulnerabilities, and intrusions.
Performs analyses to validate established security requirements and to recommend additional security requirements and safeguards.
Occasionally provide briefings to experienced staff on forensics investigation results.