Cyber Analyst, Digital Forensics Incident Response

Job Description

At-Bay is seeking a Cyber Analyst to join their Digital Forensics and Incident Response (DFIR) team. The Cyber Analyst will deliver incident investigation and response services to At-Bay insureds. This role involves forensically sound collection, analysis of digital evidence, development of incident timelines, identification of root causes, participation in negotiations and incident recovery, and development of incident reports and recommendations.

• Forensically sound collection, transmission, and storage of digital evidence
• Analysis of digital evidence to identify indicators of compromise and adversary activity
• Development of incident timelines and theories of compromise
• Identification of incident root causes
• Participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)
• Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary
• Development and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessary
• Development and delivery of recommendations to mitigate the risk of future incidents for impacted insureds
• Development and delivery of incident response training and simulations for targeted insureds

Requirements:

• Previous digital forensics and incident response experience
• Strong oral and written communication skills
• Previous hands-on experience performing digital forensics and incident response
• Previous hands-on experience working in information technology operations
• Bachelor’s degree or equivalent
• Minimum of 2 years of experience in cybersecurity operations, incident response, incident recovery, or another security discipline
• Willingness to travel as needed to perform job functions

At-Bay offers:

• Fully remote position