Match score not available

Lead Digital Forensics Incident Response Analyst

Remote:

Full Remote

Contract:

Full time

Experience:

Senior (5-10 years)

Work from:

United Kingdom

Offer summary

Qualifications:

Bachelor's Degree in related field, Relevant technical certifications (GCIH, GCFA, etc.), Extensive experience in cybersecurity and forensics, Proficiency with digital forensic tools, Experience automating workflows with scripting languages.

Key responsabilities:

Conduct digital forensic investigations independently and within a team
Develop and share threat intelligence to enhance detection capabilities
Lead development of forensic playbooks and scalable procedures
Create strategies for incident response tools deployment
Mentor junior team members on forensic techniques

Thermo Fisher Scientific Large https://www.thermofisher.com/

10001 Employees

HQ: Waltham

See more Thermo Fisher Scientific offers

Job description

Work Schedule

Other

Environmental Conditions

Office

Lead Digital Forensics Incident Response Analyst

Join the dynamic team at Thermo Fisher Scientific as a Lead Digital Forensic Incident Response Analyst, leveraging your expertise to enhance digital forensics and incident response, reducing risk and improving our capabilities globally

What will you do?

Conduct digital forensic investigations in response to high or critical security incidents, independently or as part of a team.
Develop and share relevant threat intelligence with team members to improve existing detection and response capabilities.
Lead the development of forensic playbooks and scalable procedures, recommending technical solutions to reduce risk across the enterprise.
Develop solutions and strategies to build and deploy scalable tools for incident response for the team and the global SOC.
Act as a mentor and provide guidance to junior team members.
Apply your knowledge of the current and emerging threat landscape to active threat hunting exercises.

How will you get here?

Education

Bachelor's Degree or equivalent experience in cybersecurity, computer science, engineering, or another relevant field.
Relevant technical certifications a plus, such as GCIH, GCFA, GCFE, GREM, GCTI, and others.

Experience

Extensive experience in combined cybersecurity, particularly in forensics, architecture, and incident response.
Proficiency in using tools like Magnet Axiom, AccessData FTK, Encase, X-Ways, The Sleuth Kit/Autopsy, Volatility, Windows, Linux, and MacOS
Experience automating workflows with PowerShell, Bash, or Python.
Familiarity with the TCP/IP suite of protocols.
Demonstrable experience leading forensic investigations based on EDR, XDR, memory, disk, and log-based evidence.
Experience conducting static and dynamic malware reverse engineering.
In-depth knowledge of Cloud, Web Application, and API security, including conducting forensic investigations on their technology stacks.

Knowledge, Skills, Abilities

Ability to explain technical details to business leadership with a focus on encouraging technical changes or investment where appropriate

We offer competitive remuneration, annual incentive plan bonus, healthcare, and a range of employee benefits. Thermo Fisher Scientific offers employment with an innovative, forward-thinking organization, and outstanding career and development prospects. We offer an exciting company culture that stands for integrity, intensity, involvement, and innovation!