R00353446 - Investigator/AI Developer -Remote USA

ManpowerGroup WorkMyWay•Remote USA, WI

16h•Remote

About The Position

This role involves conducting complex forensic investigations, performing digital forensics, threat hunting, and participating in incident response across various environments. A key aspect of the role is developing proprietary investigation tools, automation scripts, and data products using AI-assisted development, low-code platforms, and data visualization tools. The position requires translating repeatable investigation processes into functional prototypes and applying generative AI and AI coding assistants as core development accelerators. The developer will also be responsible for governing the tools they build, including documentation, version control, and onboarding guides. Collaboration with senior practitioners to identify opportunities for new tooling to improve speed, quality, or scalability is also expected. Additionally, the role involves client engagement, including interfacing with stakeholders and legal counsel, authoring reports, presenting findings, and supporting leadership in scoping engagements.

Requirements

Bachelor’s Degree or equivalent work experience
Minimum of 3 years’ experience in: DFIR with demonstrated expertise in complex investigations
Minimum of 3 years’ experience in: Cybersecurity consulting and data-oriented development or analysis
Minimum of 3 years’ experience in: Building tools that others use in professional practice
Minimum of 3 years demonstrated experience in: At least one data or development layer: Python, PowerShell, Power BI, Power Apps/Automate, SQL, or comparable stack
Minimum of 3 years demonstrated experience in: Common DFIR toolsets (Volatility, X-Ways, FTK, EnCase, Autopsy, etc.)
Minimum of 3 years demonstrated experience in: Microsoft Windows, GNU/Linux, and MacOS operating systems
Minimum of 3 years demonstrated experience in: Memory forensics
Minimum of 3 years demonstrated experience in: Enterprise environments, Active Directory, and common attack patterns
Minimum of 3 years demonstrated experience in: Threat hunting on both endpoints and networks
Minimum of 3 years demonstrated experience in: Industry recognized incident response lifecycles and frameworks (e.g., SANS, NIST, MITRE, etc.)
Minimum of 3 years demonstrated experience in: Producing accurate, defensible, well-documented analysis
Minimum of 1 year demonstrated experience in: Using AI coding assistants and generative tools as a fluent part of your everyday development workflow
Minimum of 1 year demonstrated experience in: Azure and cloud-native architectures; comfort using AI as a development accelerator

Nice To Haves

Experience with cloud forensics across AWS, Azure, and GCP; OT/ICS environments a plus
Malware analysis capabilities: unpacking, deobfuscation, behavior analysis, reverse engineering
Experience with AI governance, responsible use frameworks, or tool validation in a security or consulting context

Responsibilities

Conduct complex forensic investigations including advanced memory forensics, malware triage, encrypted artifact recovery, and anti-forensics detection
Perform host and network digital forensics, log analysis, and threat hunting in support of incident response engagements
Leverage EDR solutions, cloud platforms (AWS, Azure, GCP), and threat intelligence to identify and document attacker TTPs
Participate in incident response across cloud, OT, and traditional enterprise environments
Develop indicators of compromise and contribute to comprehensive, defensible attack timelines
Design and build proprietary investigation tools, automation scripts, and data products that accelerate forensic workflows and improve team consistency
Translate repeatable investigation processes into functional prototypes using AI-assisted development, low-code platforms, and data visualization tools (Power BI, Azure Data Services, Python, or similar)
Apply generative AI and AI coding assistants as core development accelerators to reduce manual effort across triage, analysis, and reporting
Govern the tools you build: documentation, version control, onboarding guides, and iteration based on real-world engagement feedback
Collaborate with senior practitioners to identify where new tooling improves speed, quality, or scalability across service offerings
Interface with client stakeholders and legal counsel throughout the engagement lifecycle, both technically and strategically
Author comprehensive, defensible written reports on investigative findings
Present technical findings and tool outputs on client calls
Support leadership in scoping engagements with methodical, innovative approaches