UNKNOWN

FEED

You will sit in the hot seat during major incidents, build high-efficacy detection engineering pipelines across cloud and hybrid infrastructure, and continuously elevate our threat hunting and triage posture. Adversarial Testing & Exercises: Lead and participate in regular Red/Purple team operations and executive tabletop exercises to stress-test incident response readiness and validate control coverage.

CoinDesk

Manager / Sr. Manager, Secops & Cyber Defense

ea_via_bold

Collaborate with SOC, threat hunting, and security engineering teams to reduce false positives, accelerate mean time to detect (MTTD) and respond (MTTR), and implement proactive detection use cases. Lead the end-to-end transition of MSSP services from the current provider to the new partner, including planning, knowledge transfer, contract/SLA alignment, and cutover execution.

Boyd Gaming Corporation

Senior Cyber Defense Manager - Incident Response

If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY's Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com. Have comprehensive knowledge in all domains of Information Security and associated technologies in the support of collaboration with partnering teams, eradication, and remediation efforts in support of cybersecurity incidents, and appropriate identification and assignment of gaps identified during response efforts.

YEAR

Ernst & Young Global Ltd

Cyber Defense Incident Responder - Associate Director

Experience collecting data, chain of custody and reporting results; handling and escalating security issues or emergency situations appropriately; providing incident response capabilities to isolate and mitigate threats to maintain confidentiality, integrity, and availability for protected data. You will work closely with the leads who run insider threat monitoring, threat hunting, incident response, digital forensics, and vulnerability assessment, and you are accountable for how well those functions work together, not just how well each one works alone.

Agile Defense

Security Operations Center Manager (CBP)

Demonstrated breadth and depth of technical security expertise across Security Information and Event Management (SIEM), Endpoint/Extended Detection and Response (EDR/XDR), Cloud Access Security Brokers (CASB), Information Protection/Data Loss Prevention (DLP), AI Security (with, of, for), Advanced Identity Protection, User Entity Behavioral Analytics (UEBA), Network Infrastructure, Firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), Zero Trust Network Architecture, and OT/IoT Security Solutions. One or more of the following security domains: Security Operations Center (SOC) Modernization (i.e. SIEM, SOAR); Zero Trust (i.e. securing identity, endpoints, data, applications, network, infrastructure); Security Governance Risk and Compliance (GRC); Critical Infrastructure Protection (i.e. securing Operational Technology, Internet of Things); Security Architecture and Engineering (Application, Network, Systems).

DO WHAT YOU LOVE Make your mark on the world’s most used technologies. Develop the next hit mobile application. Pioneer a startup that could be the next big thing. At Microsoft, you choose your path. Headquartered in Redmond, Washington, Microsoft is a top innovator in both the consumer and enterprise technology industry. Just a few of the many things our products do are unleash creativity, connect businesses, and make learning more fun. But our continued success is based on one thing: our employees. We hire amazing, talented people and give them the opportunities—and the tools—to succeed. WHY MICROSOFT? As a Microsoft employee, you’re surrounded by a diverse group of the smartest people in your field. This fosters new ideas, better business results, and creates a dynamic work environment. In the office, you’re constantly challenged and supported by your colleagues. Every day holds something new and exciting. We also offer unparalleled depth and breadth of career opportunities. As an industry leader in multiple fields, working for Microsoft means being able to do whatever you feel passionate about—and being able to make an impact in that field. From day one, we give our employees significant responsibility. This means that you’ll know that you directly contributed to something that has a positive impact on people worldwide. Whether you choose to work in management, dive deep into the newest technology, or explore multiple professions, you’ll find everything you need at Microsoft to drive your career—and to make a difference. WE GET IT – YOU’RE MORE THAN YOUR JOB Everyone works differently and is motivated by different things. We also understand that there’s more to you than your job. That’s why we offer competitive pay and a wide assortment of benefits-- to help you make the most of life at work and away from it. GET THE BALL ROLLING

Microsoft Corp

Cloud Solution Architect- CYBERSECURITY -CTJ-Top Secret/SCI

QUALIFICATIONS Minimum required experience Five (5) years of progressive professional experience in incident response role, SOC analyst role with emphasis in cyber security issues, incidents, hunts or digital forensics and operations, and computer incident response lifecycle. The IR team conducts security investigations for potential threat activity identified within the organization, conducts deep-dive forensic investigations (host-based, cloud and network), identify and implement countermeasures, as well as track and report on incident activity to USG customers.

Incident Response Team Lead (CBP)

FULL_TIME

Candidates will conduct in-depth host-based and network-based digital forensic examinations using both industry-wide forensic and network tools, as well as specialized applications to forward the investigations. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies.

Peraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets. Every day, our employees do the can’t be done, solving the most daunting challenges facing our customers.

Peraton

Cyber Threat (Forensics) Analyst, Senior Associate

[AW]-iCims

Candidates will have experience in maintaining a comprehensive understanding of the cyber threat landscape, including identifying and analyzing cyber threats actors and activities to enhance cybersecurity posture of the organization’s IT operating environment. Applicant will possess a strong cyber security background with experience in host and network-based forensics related to the identification of advanced cyber threat activities, intrusion detection, malware identification, and security content development (e.g., signatures, rules, queries etc.).

Threat Hunt Lead (CBP)

Certifications: One or more of the following active forensic certifications - Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS) certifications: Certified Computer Examiner (CCE) Certified Forensic Computer Examiner (CFCE), GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), Certifications related to mobile device forensic tools (e.g. Cellebrite Certified Mobile Examiner (CCME), XRY, Oxygen Forensic® Certified Examiner (OFCE)), Certifications related to computer forensic tools (e.g., EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)), Data recovery or advanced data acquisition related certifications.

Digital Forensics Examiner

QXO is North America's largest distributor and installer of insulation, the second-largest distributor of roofing products, the second-largest publicly traded distributor of lumber and building materials, and the largest distributor of waterproofing products. What you'll do: Own the enterprise data loss prevention (DLP) platform end to end: architecture, administration, policy design, tuning, and alert triage across endpoint, email, web, cloud, and SaaS.

QXO Inc

Senior Manager, Data Protection & Forensics

Requisition #: 1433 Job Title: Deputy Program Manager Location: Reston, VA Clearance Level: TS (SCI Eligible) Required Certification(s): CISSP or CISSP-ISSMP or CISM or PMP SUMMARY Agile Defense is currently seeking a highly technical, hands-on Cybersecurity Operations Center (CSOC) Lead and Deputy Program Manager with advanced skillsets in cyber security, to develop and operate cyber security capabilities for a variety of federal customers. A minimum of five (5) years of hands-on experience with experience in the last two (2) years that includes host-based and network-based security monitoring, identifying and analyzing anomalous activities with familiarity in insider threat monitoring software, host-based forensic tools, intrusion detection systems, intrusion analysis functions, security information event management (SIEM) platforms, endpoint detection and response tools, security operations ticket management.

Deputy Program Manager

SAIC is seeking a Biometrics Watchlist Lead to serve as the senior technical and operational authority for all biometric watchlisting, identity intelligence processing, and attribution analysis activities performed under an Intelligence Community program. Coordinating with Digital Forensics, Multimedia Intelligence, Reverse Engineering, and Data Science functional areas to identify fusion opportunities and integrate biometric findings into broader multi-disciplinary intelligence products.

SAIC is a premier Fortune 500® technology integrator driving our nation's digital transformation. Our robust portfolio of offerings across the defense, space, civilian, and intelligence markets includes secure high-end solutions in engineering, IT modernization, and mission solutions. Using our expertise and understanding of existing and emerging technologies, we integrate the best components from our own portfolio and our partner ecosystem to deliver innovative, effective, and efficient solutions that are critical to achieving our customers' missions.

We are a team of 26,000 strong driven by mission, united purpose, and inspired by opportunity. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.1 billion. For more information, visit saic.com.

Science Applications International Corp

Biometrics Watchlist Lead

Requisition #: 1435 Job Title: Incident Response Team Lead Location: Reston, VA Clearance Level: TS (SCI Eligible) Active Certified Information System Security Professional (CISSP) SUMMARY Agile Defense is seeking experienced Cyber Incident Response Team Lead to support an enterprise cybersecurity program that delivers 24/7/365 Cybersecurity Operations Center (SOC) services. QUALIFICATIONS Required Certifications Certified Information System Security Professional (CISSP) and One or more of the following certifications: GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH); GIAC Certified Forensic Analyst (GCFA); SANS GIAC Certified Enterprise Defender (GCED) or Other Information Assurance Technician (IAT) Level III certification in accordance with DoD Directive 8570.1.

Incident Response Team Lead

The ideal candidate will be responsible for investigating and responding to cybersecurity incidents, conducting digital forensic and incident response investigations, being the primary point of contact for external clients, and being able to work independently against engagement milestones from forensics to log analysis to report writing. Conduct digital forensic science-based incident response investigations on a variety of digital devices, including servers and end user workstations, network systems, SaaS platforms that contain artifacts, logging, and data of investigative relevance.

Trustwave Holdings Inc

Cyber Consultant, DFIR

NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. Job Summary: The Senior SOC Analyst is a key member of the 24/7/365 Security Operations Center, which serves as the escalation point for advanced investigations, incident response, and proactive threat hunting.

NTT DATA Services, LLC

Information Security Advisor

Administer, maintain, tune, and perform heath checks on cybersecurity products and services (such as secure mail gateway, SIEM, EDR, vulnerability management, brand monitoring, threat intelligence, security rating, DDoS, web proxy, file integrity monitoring (FIM), data loss prevention (DLP), User Entity & Behavioral Analytics (UEBA), and other). The Lead Analyst will oversee the SOC team onshore and will be responsible for the Vulnerability Management program, attaining SLA benchmarks, the collection of tools and performance metrics, ensuring SOP's and playbooks are well updated and audited, incident response, digital forensics, and supporting penetration remediation on applications/systems.

Frontier Airlines Holdings, Inc.

Lead - Cybersecurity Operations

You will help guide the team's technical approach, support complex investigations, and ensure high-quality analysis that enables our customer to better understand, detect, and respond to sophisticated cyber threats. You will collaborate closely with a highly skilled team of analysts, providing technical direction, mentorship, and day-to-day support to strengthen team performance and help individuals grow in their careers.

Parsons is a technology-driven engineering services firm with more than 70 years of experience in the engineering, construction, technical, and professional services industries. The corporation is a leader in many diversified markets with a focus on infrastructure, defense, security, and construction. Parsons delivers design/design-build, program/construction management, systems design/engineering, cyber/converged security, and other professional services packaged in innovative alternative delivery methods to federal, regional, and local government agencies, as well as to private industrial customers worldwide.

Parsons Corp

Intrusion Analysis Technical Lead

Parsons Commercial Technology Group Inc.

Contribute to the development and implementation of analyst training programs designed to streamline onboarding and advance analyst skill sets in Digital Forensics, Incident Response, Malware Analysis, Detection Engineering, Threat Hunting, and Automation. The Security Operations Manager will work with their peer regional managers to ensure consistent global operations while providing our analyst team with training opportunities and career growth.

Huntress Labs

Manager, Security Operations Center

GreenHouseAPI

Develop forensic reports, malware analysis reports, incident artifacts, and technical documentation in accordance with Judiciary SOC Forensics SOPs and JSOCIRP requirements. Analyze forensic artifacts, memory images, endpoint telemetry, SIEM data, and filesystem timelines to identify malicious activity and intrusion vectors.

Forensics Analyst Jobs in the United States

Manager / Sr. Manager, Secops & Cyber Defense CoinDesk

Senior Cyber Defense Manager - Incident Response Boyd Gaming Corporation

Cyber Defense Incident Responder - Associate Director Ernst & Young Global Ltd

Security Operations Center Manager (CBP) Agile Defense

Cloud Solution Architect- CYBERSECURITY -CTJ-Top Secret/SCI Microsoft Corp

Incident Response Team Lead (CBP) Agile Defense

Cyber Threat (Forensics) Analyst, Senior Associate Peraton

Threat Hunt Lead (CBP) Agile Defense

Digital Forensics Examiner Peraton

Senior Manager, Data Protection & Forensics QXO Inc

Deputy Program Manager Agile Defense

Biometrics Watchlist Lead Science Applications International Corp

Incident Response Team Lead Agile Defense

Cyber Consultant, DFIR Trustwave Holdings Inc

Information Security Advisor NTT DATA Services, LLC

Lead - Cybersecurity Operations Frontier Airlines Holdings, Inc.

Intrusion Analysis Technical Lead Parsons Corp

Intrusion Analysis Technical Lead Parsons Commercial Technology Group Inc.

Manager, Security Operations Center Huntress Labs

AOUSC - Forensic and Malware Lead cFocus Software Inc

Similar Job Searches

See More Jobs

Stand out to leading employers.