Bloomberg
Senior Incident Response & Digital Forensics Analyst
$190K–$260K
New York · Senior · Full-time · Posted Oct 28, 2026
- Experience
- Substantial hands-on experience; no number of years stated.
About the job
Leads complex cybersecurity incident investigations and digital forensics, determines attacker activity and impact, and strengthens team expertise and repeatable detection practices.
What you'll do
- Investigate incidents end to end using host, memory, network, and log evidence; analyze forensic images and suspicious binaries, and document findings.
- Coordinate with stakeholders during significant incidents and mentor colleagues through pairing, playbooks, procedures, and knowledge sharing.
- Improve forensic tooling, workflows, standards, and durable detection coverage based on lessons learned.
What they ask for
- Hands-on experience leading security incident investigations from initial signal through root-cause analysis and written conclusion.
- Practical disk and memory forensics across Windows and Linux, including evidence acquisition and analysis.
- Malware analysis experience, including static and dynamic analysis, safe detonation, and extracting observables for detection and threat hunting.
- Deep hands-on experience investigating large datasets using Splunk or a comparable enterprise search and log-analysis platform.
Nice to have
- Cloud forensics across AWS, Azure, or GCP; reverse engineering; memory-forensics frameworks; or threat hunting.
- Experience with CrowdStrike Falcon, endpoint/network telemetry, detection engineering, or mainstream commercial AI platforms for security or analytical workflows.
Pay
190,000 - 260,000 USD Annual (base salary)
Tools
Windows, Linux, macOS, Splunk, Python, Volatility, AWS, Azure
AI focus
Experience applying mainstream commercial AI platforms to security or analytical workflows is beneficial.
Model-written summary · the original posting is authoritative