Cybersecurity Incident Response, Digital Forensics Specialist

🔥 8 hours ago

🇺🇸 United States – Remote

💵 $40 - $50 / hour

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Softthink Solutions

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2003

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Softthink Solutions is an emerging innovative IT services partner that provides end-to-end project solutions and premium class services. The company specializes in several areas including enterprise application development, cloud services, ERP, business analytics, testing & QA, artificial intelligence, DevOps, and IT infrastructure management. Softthink is recognized as a certified small business in various categories, including 8(a), HUBZone, and WOSB, and has established strategic partnerships with major companies like Amazon Web Services, Microsoft Azure, and Google Cloud. Their commitment to quality is demonstrated through various ISO certifications and their focus on delivering cloud modernization, cybersecurity, and analytics solutions.

📋 Description

• Conduct rapid cybersecurity incident triage, forensic investigations, and security assessments • Investigate CISA Known Exploited Vulnerabilities Catalog entries and assess potential exploitation • Analyze endpoint, network, application, authentication, SIEM, EDR, vulnerability scanning, and cloud audit logs • Perform forensic investigations into persistence, privilege escalation, lateral movement, command-and-control communications, and potential data exposure • Collect, preserve, analyze, and document digital evidence following NIST SP 800-86 and forensic evidence-handling practices • Develop incident response plans and recommend containment, eradication, recovery, and risk mitigation strategies • Collaborate with cybersecurity teams, system administrators, cloud engineers, and stakeholders • Escalate security compromises and provide actionable technical recommendations • Prepare forensic investigation reports, incident timelines, technical findings, executive summaries, and remediation recommendations • Support incident acknowledgment, forensic triage, daily status updates, and incident closeout documentation • Maintain investigation records, evidence logs, chain-of-custody documentation, and technical artifacts • Ensure incident response activities align with federal cybersecurity requirements, NIST guidance, and organizational security policies

🎯 Requirements

• US Citizen work authorization required • 8+ years of professional experience in cybersecurity, information security, or related technical disciplines • 5+ years of hands-on experience in cybersecurity incident response, digital forensics, or security investigations • Demonstrated experience investigating cybersecurity incidents within enterprise or federal IT environments • Strong understanding of vulnerability exploitation, incident response processes, and digital forensic methodologies • Experience analyzing SIEM, EDR, endpoint, network, and cloud security logs • Working knowledge of Windows and Linux operating systems, security architecture, and common attack techniques • Familiarity with the CISA KEV Catalog, NIST SP 800-61, NIST SP 800-86, and federal cybersecurity practices • Experience preserving digital evidence and preparing technically defensible investigation reports • Strong analytical, troubleshooting, technical documentation, and communication skills • Ability to respond to urgent cybersecurity incidents and work within accelerated investigation timelines • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent professional experience is listed as a preferred qualification • Preferred certifications include GCIH, GCFA, GCFE, GCFR, CISSP, or other relevant cybersecurity certifications

🏖️ Benefits

• Cutting-edge technology, training, and career guidance • Opportunities to work with leading multinational clients • Established methodologies, processes, and mentoring • Opportunities to work with specialized services and advanced IT solutions • Continuous learning opportunities • Access to a growing R&D division exploring the latest technological developments

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume