Digital Forensics Analyst

Digital Forensics Analyst

Requirements

• At least 3 years of Digital Forensics experience
• Identify, analyze, and present evidential data from workstation orientated systems, including but not limited to systems installed with Microsoft Windows
• Experience in investigating specific facets or workstreams of various incident scenarios/investigations as part of a broader DFIR/investigative team
• Generalist or broad knowledge in computing and networking
• Generalist understanding of information security technologies, techniques and processes
• Digital Forensics and Incident Response Certification (i.e. EnCE or related SANS certification, such as GCFA)
• Experience in Cloud and/or containerization technologies (i.e. Docker and Kubernetes) within an enterprise environment
• Experience in Linux/Unix systems with particular focus on RedHat or other enterprise scale distributions (distros)

Responsibilities

• Utilizing extensive Digital Forensics and Incident Response experience to conduct and manage individual caseload across the entire incident response or investigative lifecycle from start to finish
• Discovering unfamiliar technology or data during the midst of an incident or investigation and assessing its relevance to the issues at hand
• Leveraging ability to communicate, both written and verbal, in a clear, concise and inclusive manner to technical and non-technical audiences with colleagues, peers and stakeholders at all levels
• Embracing new and upcoming technologies and assessing how they could apply and improve on the way in which the team responds to incidents
• Working alongside a global team with colleagues in the USA and Europe, whilst placing emphasis on collaboration and sharing of ideas and methodologies
• Undertaking and sharing the responsibilities of working an on-call schedule so that the bank is well placed to respond to incidents or investigations when required

Preferred Qualifications

• A Cloud related qualification or certification, such as Certified Cloud Security Professional (CCSP), or related to Microsoft Azure and Amazon Web Services (AWS)
• Linux Qualification or Certification, e.g Red Hat Certified System Administrator
• Bachelor’s, Masters or Doctorate Degree in a Computer Science, Computer Engineering, Information Security or Cyber/Digital Forensics related discipline
• Programming and scripting skills or experience, such as: Programming skills and experience, such as Java, C++, Python; or Batch or shell scripting experience within Windows or Linux environments