Digital Forensics and Incident Response Analyst

🔥 1 minute ago

🇮🇪 Ireland – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚨 Incident Response Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Reinsurance Group of America, Incorporated

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1973

💼 Consulting

📦 Logistics

🛡️ Insurance

Consulting • Logistics • Insurance

Reinsurance Group of America, Incorporated (RGA) is a leading global reinsurance company that focuses exclusively on life and health reinsurance solutions. With a strong commitment to providing innovative products and services, RGA helps its clients manage risk and enhance their insurance portfolios through its expertise in underwriting, claims management, and financial solutions. The company operates in multiple global markets, leveraging its extensive data and analytics capabilities to offer tailored solutions that meet the unique needs of the life and health insurance sectors.

📋 Description

• Lead enterprise incident response and cyber crisis engagements from detection through recovery • Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments • Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms • Develop containment, eradication, and remediation strategies aligned to business risk • Produce executive briefings, technical reports, board-ready updates, and post-incident reviews • Partner with legal, compliance, privacy, audit, and external stakeholders when required • Drive adoption of AI-assisted workflows to improve investigation speed, reporting quality, and operational efficiency • Provide technical leadership during investigations and influence strategic security decisions • Contribute to capability development and serve as a trusted advisor for cybersecurity risk management and response readiness • Support the 24/7 on-call rotation • Engage with stakeholders across multiple regions and time zones

🎯 Requirements

• 5+ years in incident response, DFIR, security operations, consulting, or related cybersecurity disciplines • Experience leading major cyber incidents involving ransomware, business email compromise, insider threats, cloud compromise, supply chain attacks, or advanced persistent threats • Strong digital forensics capability using industry-standard forensic and triage tools • Experience with Splunk, Microsoft Defender, CrowdStrike Falcon, ServiceNow SIR, and cloud security technologies • Knowledge of network protocols, detection engineering, log analytics, and threat hunting methodologies • Excellent verbal and written communication skills for technical and executive audiences • Demonstrated ability to manage multiple priorities in a global enterprise environment • Mandatory experience with forensic tools such as FTK, EnCase, X-Ways, Magnet Axiom, or SIFT • Industry certifications such as GCFA, GCFE, GCIH, GCIA, CISSP, CISM, Azure Security Engineer, or AWS Security Specialty are highly desirable but not mandatory • Bachelor's degree in Cybersecurity, Computer Science, Information Security, Engineering, Intelligence Studies, or a related discipline, or equivalent experience, is desirable but not mandatory • Ability to participate in a 24/7 on-call rotation

🏖️ Benefits

• Gain valuable knowledge from and experience with diverse, caring colleagues around the world • Respectful, welcoming environment that fosters individuality and encourages pioneering thought • Vast, endless career potential • Remote or hybrid eligible • Participation in a 24/7 on-call rotation • Travel is not required as part of standard day-to-day duties • AI-assisted preliminary screening with personalized job recommendations, automated interview scheduling, experience-based evaluation, and real-time chatbot answers