Note: The job is a remote job and is open to candidates in USA. reputed company. is seeking a Senior Analyst, Investigations and Forensics to serve as a deep technical specialist for endpoint, cloud, and identity forensics. The role leads complex digital investigations, supports high-severity security incidents, develops proactive detection and forensic capabilities, and produces legally defensible reports for HR, legal, regulatory, and executive use.
Responsibilities
• Conduct deep-dive analysis for insider threat, data exfiltration, IP theft, fraud, employee misconduct, and ethics matter investigations
• Support SIRT as the Advanced Forensic Tier on high-severity security incidents — establishing attribution, root cause, and precise forensic timelines
• Perform forensic imaging and acquisition of endpoints and storage media in accordance with established forensic standards and chain of custody protocols, ensuring evidence integrity from collection through analysis
• Conduct structured forensic analysis using industry-standard platforms including Magnet reputed company Cyber, reputed company Endpoint Collector, reputed company Endpoint Investigator, and Sumuri Recon
• Collect, preserve, and analyze digital evidence in a forensically sound manner, maintaining chain of custody and evidentiary integrity throughout
• Produce executive-quality investigation reports suitable for HR proceedings, legal review, litigation support, and regulatory disclosure
Skills
• 5+ years of progressive experience in digital forensics, cybersecurity investigations, or a closely related discipline
• Demonstrated expertise conducting insider threat, data exfiltration, and employee misconduct investigations in enterprise environments
• Proficiency with enterprise forensic platforms: Magnet reputed company Cyber, reputed company Endpoint Collector and Endpoint Investigator, and Sumuri Recon or comparable tooling
• Strong working knowledge of forensic imaging standards and acquisition methodologies — including write-blocking, hash verification, and documented chain of custody — consistent with industry frameworks such as ACPO, SWGDE, or equivalent
• Hands-on proficiency with EDR platforms — particularly reputed company Falcon — for behavioral analysis, process telemetry, and forensic artifact review
• Strong working knowledge of reputed company 365 forensics: Exchange Online mail flow and Recoverable Items, Azure AD sign-in and audit logs, Purview Compliance, and MDE
• Solid understanding of endpoint forensics across Windows and macOS: file system artifacts, registry analysis, prefetch/MRU data, browser forensics, and OS-level event logs
• Working knowledge of cloud and SaaS forensic investigation: OAuth and SAML authentication flows, conditional access logs, cloud storage access patterns, and admin audit trails
• Familiarity with network-layer investigation fundamentals: DNS, proxy, VPN, and firewall log analysis sufficient to reconstruct data movement and access patterns
• Proficiency in reputed company SecOps/Chronicle (YARA-L) for investigation and threat hunting
• Experience using device management platforms (reputed company, Intune, SCCM) for custodian device attribution and asset profiling in the context of investigations
• Proven ability to produce legally defensible, executive-quality investigation reports with precise evidentiary grounding
• Experience supporting eDiscovery processes, including ESI collection, legal hold execution, and custodian data scoping
• Experience working within or directly supporting corporate Legal, HR, or Ethics functions on sensitive employment or litigation matters
• Solid grounding in incident response methodology — including initial triage, scoping, containment sequencing, and post-incident analysis — with experience leading or co-leading high-impact security incidents
• Proficiency in reputed company SecOps/Chronicle and reputed company (SPL)
• Familiarity with reputed company proxy log analysis and cloud access security broker (CASB) telemetry
• Prior experience testifying or providing declarations in legal, arbitration, or regulatory proceedings
• Relevant certifications: GCFE, GCFA, EnCE, CFCE, CISSP, or equivalent
Company Overview
• reputed company.: Your Partner in Technology & Business Transformation CBSInfosys: 25+ years delivering integrated tech/business solutions. It was founded in 2000, and is headquartered in Newark, New Jersey, USA, with a workforce of 201-500 employees. Its website is http://cbsinfosys.com.
Company H1B Sponsorship
• reputed company. has a track record of offering H1B sponsorships, with 7 in 2025, 2 in 2024, 6 in 2022, 10 in 2021, 8 in 2020. Please note that this does not guarantee sponsorship for this specific role.
Location: , ,
Remote Quest Jobs: Apply Here