Digital Forensics Lead – Incident Response

Job not on LinkedIn

🔥 5 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

RSI Security

WebsiteLinkedInAll Job Openings

51 - 200 employees

🔒 Cybersecurity

📋 Compliance

🔐 Security

Cybersecurity • Compliance • Security

RSI Security is a leading cybersecurity and compliance provider based in the United States. The company specializes in helping organizations navigate complex compliance standards such as PCI DSS, HIPAA, GDPR, and more. They offer a wide range of services including cybersecurity risk assessments, virtual CISO consulting, penetration testing, cloud security, and incident response. RSI Security caters to various industries, including government, healthcare, finance, and technology, ensuring robust security frameworks and compliance management. As a trusted partner, RSI Security is dedicated to minimizing risk and safeguarding data for companies and institutions worldwide.

📋 Description

• Execute the end-to-end forensic process—collection, examination, analysis, and reporting—ensuring technical rigor and evidentiary integrity. • Oversee the identification and acquisition of digital evidence from diverse sources while maintaining a strictly documented chain of custody and forensic soundness. • Correlate observed behaviors against the MITRE ATT&CK® framework to pinpoint defensive gaps, validate existing controls, and enhance detection engineering. • Architect containment strategies that balance operational continuity with the need to isolate threats and preserve volatile evidence during active incidents. • Provide advanced analytical response and advisory services during high-severity security events, subject to the Consultant's availability and a mutually agreed-upon task order.

🎯 Requirements

• Minimum of 7–10 years of demonstrable experience in digital forensics, incident response, network traffic analysis, and malware triage as an independent consultant or agency. • Must hold active, advanced security and forensic certifications (e.g., GCFA, GCIH, GNFA, CISSP, or equivalent). • Public Trust eligibility is required; Active Secret clearance is highly preferred, with the ability to obtain a Top Secret (TS/SCI) clearance if dictated by specific engagement task orders. • The Consultant (and any personnel deployed by the Consultant) must successfully pass a comprehensive multi-jurisdictional background check prior to accessing sensitive RSI Security or client infrastructure. • Mastery of NIST SP 800-86 guidelines, enterprise network architecture, memory forensics, and advanced automation (Python, PowerShell, Bash).

🏖️ Benefits

• Proactive Communication: Translate complex attack narratives into clear, actionable reporting for both technical and non-technical audiences. • Data Security & Privacy: Maintain rigorous operational security (OPSEC) over all client data, utilizing encrypted channels and immediately relinquishing access and data upon project completion.