Digital Forensics & Incident Response Analyst (Cybersecurity)

Location: New York, United States; fully in-person schedule up to 5 days a week

Base salary: $98,800–$196,000 annually, with potential discretionary bonuses, incentives, and restricted stock units.

Company

USDS Joint Venture protects U.S. user data, applications, and algorithmic systems through data privacy, cybersecurity, and trust and safety programs.

What you will do

• Conduct digital forensic investigations across enterprise endpoints, servers, mobile devices, data platforms, internal systems, and cloud infrastructure.
• Acquire, image, preserve, and document physical and digital evidence according to chain-of-custody protocols and legal standards.
• Analyze file-system artifacts, memory dumps, malware, network traffic, complex queries, and data lineage to determine incident scope, root cause, and tactics, techniques, and procedures.
• Prepare forensic reports covering technical findings, event timelines, root-cause analysis, and remediation recommendations.
• Support internal investigations, eDiscovery requests, legal teams, and law enforcement coordination when needed.
• Maintain and upgrade digital forensics laboratory hardware, software, network infrastructure, go-kits, and remote acquisition equipment.

Requirements

• At least 1 year of experience in digital forensics and incident response, cybersecurity engineering, or data analytics.
• Strong understanding of Windows, Linux, and macOS file systems, including NTFS, EXT4, and APFS, and related forensic artifacts.
• Hands-on experience with evidence handling, chain of custody, and contemporaneous note-taking.
• Ability to write forensic reports that explain analysis, procedures, and findings for executive-level stakeholders.
• Ability to work on-site in New York under a fully in-person schedule of up to 5 days per week.
• A bachelor's degree in cybersecurity engineering, computer science, or digital forensics, or equivalent industry experience.

Nice to have

• Experience with SQL analysis, data lineage, and data structures including Apache Hive, ClickHouse, RDS, and Redis.
• Scripting experience with Python, Bash, or PowerShell.
• Experience with OCI, AWS, Azure, or GCP.
• Experience handling high-stakes incidents and collaborating with engineers and technical operators.
• Relevant certifications such as GCIH, GCIA, GIME, GCFE, GCFA, or GREM.

Culture & Benefits

• Medical, dental, and vision insurance from the first day.
• 401(k) savings plan with company match.
• Paid parental leave, short- and long-term disability coverage, life insurance, and wellbeing benefits.
• 10 paid holidays, 10 paid sick days, and 17 days of paid personal time, with accrual increasing by tenure.
• Inclusive workplace focused on creativity, collaboration, curiosity, and continuous learning.