Cyber Analyst, Digital Forensics Incident Response
At-Bay · United States
- Hybrid
- Full-time
- $115,000 / year
- United States
Tailored resume — keyword-matched to this role.
Hiring manager — we find who's hiring.
Intro email — drafted to reach them directly.
Job highlights
- Investigate and respond to cyber incidents for At-Bay insureds.
- Analyze digital evidence to identify threats and root causes.
- Participate in threat actor negotiations and incident recovery.
- Develop incident reports and provide mitigation recommendations.
- Deliver incident response training and simulations to clients.
About the role
Cybersecurity Analyst, Digital Forensics Incident Response
Why you should join our At-Bay Security team:
At-Bay is a fast-growth InsurSec company (Insurance x Cybersecurity) on a mission to bring innovative products to the market that help protect small businesses from digital risks. As an InsurSec provider, we uniquely combine insurance with mission-critical security technologies, threat intelligence, and human expertise, to bridge the critical security capability gap that exists among SMBs in the community. We believe InsurSec is an $80B market opportunity and we are excited to expand our DFIR team in order to help expand our reach and influence in the business and security community, of which we serve 35,000 customers.
The Role:
Cybersecurity Analysts focused on Digital Forensics and Incident Response (DFIR) deliver incident investigation and response services to At-Bay insureds via:
- Forensically sound collection, transmission, and storage of digital evidence
- Analysis of digital evidence to identify indicators of compromise and adversary activity
- Development of incident timelines and theories of compromise
- Identification of incident root causes
- Participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)
- Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary
- Development and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessary
- Development and delivery of recommendations to mitigate the risk of future incidents for impacted insureds
- Development and delivery of incident response training and simulations for targeted insureds
Key skills:
- Previous digital forensics and incident response experience
- Strong oral and written communication skills
- Previous hands-on experience performing digital forensics and incident response, including several of the following: Business Email Compromise, Ransomware, Digital evidence collection and analysis, Development and analysis of cyber threat intelligence, Leadership of or participation in investigations involving digital evidence, Intrusion detection / cyber threat hunting, Malware analysis, Incident recovery activities such as restoration of data from backups, operation of decryptor tools, etc.
- Previous hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.)
Minimum requirements:
- Bachelor’s degree or equivalent
- Minimum of 2 years of experience in cybersecurity operations, incident response, incident recovery, or another security discipline
- Willingness to travel as needed to perform job functions
Preferred requirements:
- Significant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurity
- Previous background in law enforcement or government/military with experience leading complex technical investigations
- Knowledge of cloud environments, including knowledge of cloud security products and services offered by major cloud service providers (e.g., AWS, Azure, Google)
- Experience in a top-10 cyber consulting firm or leading DFIR provider preferred
- One or more industry cybersecurity certifications (e.g., GCIH, Security+, CISSP, etc.)
Work location:
- USA, Nationwide
- Fully Remote
Our estimated base pay range for this role is $80,000-$115,000 per year. Base salary is determined by a variety of factors including but not limited to market data, location, internal equitability, domain knowledge, experiences and skills. In general, if the position sparks your interest we encourage you to apply - our team prioritizes talent.
Key skills/competency
- Digital Forensics
- Incident Response
- Cybersecurity
- Threat Intelligence
- Malware Analysis
- Network Security
- Risk Management
- Cloud Security
- Investigation
- Reporting
Skills & topics
- Cybersecurity Analyst
- Digital Forensics
- Incident Response
- DFIR
- Cyber Threat Hunting
- Malware Analysis
- Cybersecurity Operations
- IT Operations
- Information Security
- Cloud Security
How to get hired
- Tailor your resume: Highlight digital forensics and incident response experience, including specific cases like BEC or ransomware.
- Showcase technical skills: Emphasize experience with evidence collection, threat hunting, and malware analysis.
- Quantify achievements: Use numbers to demonstrate impact, such as 'reduced incident response time by X%' or 'investigated Y number of incidents'.
- Prepare for technical questions: Be ready to discuss your approach to forensic investigations and incident recovery scenarios.
- Demonstrate communication skills: Prepare examples of how you've reported findings to executives and attorneys.
Technical preparation
Practice forensic imaging and evidence preservation techniques.,Analyze network traffic for suspicious activity.,Review malware samples in a safe environment.,Familiarize yourself with cloud security logs.
Behavioral questions
Describe a complex investigation you led.,How do you handle high-pressure incident scenarios?,Explain a time you communicated technical findings clearly.,How do you stay updated on new threats?
Frequently asked questions
- What is the remote work policy for the Cybersecurity Analyst, Digital Forensics Incident Response role at At-Bay?
- The Cybersecurity Analyst, Digital Forensics Incident Response position at At-Bay is fully remote within the USA. This offers flexibility for candidates across the nation to contribute to the security of At-Bay's insureds.
- What is the typical career path for a Cybersecurity Analyst in DFIR at At-Bay?
- At At-Bay, a Cybersecurity Analyst in DFIR can progress through various specializations within incident response and digital forensics. Opportunities may include leading complex investigations, specializing in threat intelligence, or moving into senior analyst or team lead roles, contributing to the growth of the InsurSec market.
- What are the primary responsibilities of a Cybersecurity Analyst in DFIR at At-Bay?
- The primary responsibilities include conducting forensic analysis of digital evidence, identifying indicators of compromise, determining root causes of incidents, participating in threat actor negotiations, and assisting with incident recovery and reporting for At-Bay's insureds.
- Does At-Bay offer training or certifications for their Cybersecurity Analysts in DFIR?
- While the role prefers candidates with existing certifications like GCIH or CISSP, At-Bay is a fast-growth company in a significant market opportunity. They invest in their team and may offer development opportunities, including training and simulations, to enhance skills in areas like cloud security and advanced investigations.
- How does At-Bay combine insurance and cybersecurity for its customers?
- At-Bay operates as an InsurSec company, uniquely integrating insurance coverage with essential cybersecurity technologies, threat intelligence, and expert human analysis. This approach aims to fill the security capability gap for small and medium-sized businesses.
- What kind of companies does At-Bay protect?
- At-Bay focuses on protecting small and medium-sized businesses (SMBs) from digital risks. They serve a large customer base, aiming to provide innovative InsurSec products to this market.
- What is the expected salary range for the Cybersecurity Analyst, Digital Forensics Incident Response position?
- The estimated base pay range for this role at At-Bay is $80,000 to $115,000 per year. This range is determined by various factors including market data, location, experience, and skills.