Lead Security Analyst (Digital Forensics and Incident Response)

Location: Hybrid, with hiring near the Irving, TX and Stamford, CT Centers of Excellence.

Base salary: USD 94,000–134,000 annually, plus an annual bonus or role-based incentive plan.

Company

hirify.global provides business and technology research, analysis, and advisory insights to enterprise clients worldwide.

What you will do

• Lead digital forensic investigations involving cybersecurity incidents, insider threats, HR matters, legal requests, and regulatory inquiries.
• Acquire and analyze endpoint, cloud, network, log, and volatile system evidence across enterprise environments.
• Perform advanced log analysis to build timelines, identify root cause, and validate investigative findings.
• Develop DFIR playbooks, standard operating procedures, automation, and forensic tooling that meet legal and evidentiary standards.
• Improve detection, response, forensic readiness, and evidence preservation capabilities.
• Mentor junior investigators and produce clear, defensible reports for technical stakeholders, auditors, legal counsel, and executives.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, or a related field, or equivalent practical experience.
• 7+ years of digital forensics and incident response experience, including at least 2 years in a senior or lead capacity and experience leading complex investigations.
• Experience using Python, PowerShell, or similar scripting languages to automate forensic workflows and evidence processing.
• Hands-on experience with digital forensics tools and platforms including Magnet Forensics, EnCase, Volatility, MemProcFS, FTK, KAPE, UAC, Autopsy/Sleuth Kit, Velociraptor, or equivalent platforms.
• Experience with cloud forensics in AWS and Azure, including cloud-native services and Kubernetes/containerized workloads.
• Strong hands-on experience with Windows, macOS, Linux, and memory forensics.
• Strong proficiency with EDR/XDR, SIEM and SOAR platforms including Splunk, Microsoft Sentinel, and Athena; network forensics tools including Zscaler, ExtraHop, and Wireshark; and log analysis.
• Experience with malware analysis, reverse engineering, threat hunting, insider threat investigations, and HR/Legal-driven investigations.
• Excellent written and verbal communication skills, including producing clear forensic reports and explaining technical concepts to non-technical stakeholders.
• Strong command of evidence handling, chain of custody, forensically sound acquisition, live response, and remote collection.

Nice to have

• Certifications such as GCFA, GCFE, GNFA, GCIH, GREM, EnCE, or equivalent.
• Experience supporting legal, eDiscovery, compliance, privacy, or regulatory investigations.
• Experience using AI/LLMs to improve DFIR investigations while preserving evidentiary standards.
• Familiarity with AI-related security incidents or emerging technology risks.
• Experience building custom forensic utilities, maintaining research projects, contributing to open-source tools, or publishing technical content.
• Advanced experience integrating forensic, SIEM, EDR, and cloud security platforms through APIs and automation.

Culture & Benefits

• Flexible hybrid environment combining work from home with collaboration in offices.
• Collaborative, diverse culture focused on innovation, measurable outcomes, and cross-functional work.
• 20+ PTO days plus holidays and floating holidays in the first year.
• Medical, dental, and vision insurance; 401(k) with corporate match and immediate vesting; wellness allowances; and parental leave.
• Tuition reimbursement, certification and technical learning opportunities, employee stock purchase plan, employee assistance program, and charity matching.