digital forensics analyst

Prudential

<div><div>Job Classification:</div>
Technology - Information Security<div></div><div>
Are you passionate about safeguarding organizations from within by integrating innovative analytics, strategic prevention, and targeted education? Our Cyber Defense and Response team is dedicated to a culture where proactive risk management is part of our DNA. When you join Prudential as an Insider Risk Lead, you&rsquo;ll unlock a high-impact career path, while continuously growing your expertise at one of the world&rsquo;s leading financial institutions.<br>
<br>
Your Team &amp; Role:<br>
As an Insider Risk Specialist, you will partner with business stakeholders, technical teams, and management to mitigate insider risks. Through centralized integration and analysis of technical and non-technical information, you will identify and assess potential insider risk concerns. You&rsquo;ll lead all aspects of the investigative lifecycle, which includes conducting digital forensics, collection &amp; preservation, analysis, remediation, documentation, and post incident review. Your role requires strong analytical skills, a deep curiosity of human and technical risk factors, and a passion for continuous improvement and education.<br>
<br>
Here is What You Can Expect on a Typical Day</div><ul><li>
Coordinate cross-functional stakeholders (Security, HR, Legal, Compliance, Privacy, and IT) to ensure insider risk cases are handled consistently and in accordance with company standards and procedures.</li><li>
Independently lead end-to-end triage and investigations of insider risk events, establishing priorities and enforcing consistent investigative standards.</li><li>
Ensure proper evidence handling and investigative integrity, including chain-of-custody, documentation standards, and defensible case management practices.</li><li>
Lead analysis of insider risk incidents to determine behavioral indicators, root causes, and organizational control gaps.</li><li>
Coordinate response actions with technical and business teams to mitigate threats, protect assets, and manage employee risk appropriately.</li><li>
Provide executive reporting and risk insights, translating investigation outcomes and behavioral trends into actionable intelligence for leadership.</li><li>
Drive prevention and detection initiatives, including policy improvements, targeted awareness, and control enhancements informed by investigation findings.</li><li>
Continuously mature insider risk capabilities, incorporating threat intelligence, behavioral analytics, and industry best practices.</li></ul><div><br>
The Skills &amp; Expertise You Bring:<br>
<br>
<ul><li>Bachelor&rsquo;s degree in Information Security, Psychology, Behavioral Science, Computer Science, or related field.</li><li>Deep curiosity to understand insider threat risks, drivers, and typologies.</li><li>Experience in user activity monitoring, digital forensics, and behavioral analytics.</li><li>Strong analytical, problem-solving, communication, and collaboration skills.</li><li>Ability to influence training and awareness for purposes of insider risk mitigation.</li><li>Familiarity with regulatory and privacy requirements related to employee monitoring and insider risk programs.</li><li>Experience with insider risk detection and response strategies.</li><li>Passion for research and continuous learning.</li><li>Knowledge of data integration tools, SIEM platforms, and forensic analysis software.</li></ul><br>
Relevant Certifications:</div><ul><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Cloud Forensics Responder (GCFR)</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
SANS GIAC Cyber Threat Intelligence (GCTI)</li><li>
Certified Insider Threat Program Manager (CITPM)</li></ul><div><br>
You&rsquo;ll Love Working Here Because You Can<br>
<br>
<ul><li>Be a key player in protecting our organization&rsquo;s people, data, and reputation from emerging internal risks.</li><li>Join an inclusive culture where your expertise and ideas drive real impact.</li><li>Grow your technical and leadership skills through continual learning and hands-on experience.</li><li>Help define and shape the future of insider risk management at a globally respected institution.</li></ul></div><div></div><div>
What we offer you:</div><div></div>
Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $123,700.00 to $204,100.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills.<ul><li><div>
Market competitive base salaries, with a yearly bonus potential at every level.</div></li><li><div>
Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.</div></li><li><div>
401(k) plan with company match (up to 4%).</div></li><li><div>
Company-funded pension plan.</div></li><li><div>
Wellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs.</div></li><li><div>
Work/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.</div></li><li><div>
Education Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs.</div></li><li><div>
Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period), after one year of service.</div></li></ul><div></div><div>
Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. To find out more about our Total Rewards package, visit <div>Work Life Balance | Prudential Careers. </div>Some of the above benefits may not apply to part-time employees scheduled to work less than 20 hours per week.</div><div></div><div><div>
Prudential Financial, Inc. of the United States is not affiliated with Prudential plc. which is headquartered in the United Kingdom.</div></div><div></div><div><div>
Prudential is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, national origin, genetics, disability, marital status, age, veteran status, domestic partner status, medical condition or any other characteristic protected by law.</div></div><div></div><div><div>
If you need an accommodation to complete the application process, please email <div>accommodations.hw@prudential.com</div>.</div></div><div></div><div><div><br>
If you are experiencing a technical issue with your application or an assessment, please email <div>careers.technicalsupport@prudential.com</div> to request assistance.</div></div></div>

Specialist, Digital Forensics & Incident Response

Target

<div>The pay range is $113,000.00 - $203,000.00<p></p><p>
Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.</p><p></p><p><b>
JOIN TARGET CYBERSECURITY AS A LEAD CYBERSECURITY ANALYST - CSIRT (INCIDENT RESPONSE)</b></p><p></p><p>
About Us</p><p>
Target is an iconic brand, a Fortune 50 company and one of America&rsquo;s leading retailers.</p><p></p><p>
Target as a tech company? Absolutely. We&rsquo;re the behind-the-scenes powerhouse that fuels Target&rsquo;s passion and commitment to cutting-edge innovation. We anchor every facet of one of the world&rsquo;s best-loved retailers with a strong technology framework that relies on the latest tools and technologies&mdash;and the brightest people&mdash;to deliver incredible value to guests online and in stores. Target Technology Services is on a mission to offer the systems, tools and support that guests and team members need and deserve. Our high-performing teams balance independence with collaboration, and we pride ourselves on being versatile, agile and creative. We drive industry-leading technologies in support of every angle of the business, and help ensure that Target operates smoothly, securely, and reliably from the inside out.</p><p></p><p>
As a Lead Cybersecurity Analyst on CSIRT, you will assist with leading the team as you assess information security events and incidents across the Target environment. In this role, you will use your expertise to collaborate and utilize problem solving skills as you work among a team of skilled analysts to address complex problems within a 24x7 Cyber Fusion Center (CFC) environment. You will implement new processes and procedures as identified by the CSIRT and CFC Leadership to ensure continuous improvements for Target&rsquo;s monitoring, detection, and mitigation capabilities. You will use your expert-level knowledge of Information Security to monitor SIEM and logging environments for security events and alerts to potential (or active) threats, intrusions, and/or compromises. You will lead internal training of CSIRT Analysts to ensure their continued education as an Analyst and growth. You will work to understand the global threat landscape by working with Target Cyber Threat Intel team to maintain awareness. You will review and guide requests from internal teams and will escalate information security events according to Target&rsquo;s Cyber Security Incident Response Plan. Additionally, you will lead with containment of threats and remediation of environment during or after an incident. You&rsquo;ll act as the leader during Cyber Hunt activities alongside of the Target's Cyber Hunt Team. You will leverage your expert-level knowledge to write comprehensive reports of incident investigations.</p><p></p><p>
Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.</p><p></p><p><b>
Note: This is a shift position on Shift 2 within CSIRT. The working hours for this role are Sunday through Wednesday, 12:30pm - 10:30pm CT. If you are applying for this role you acknowledge and accept the days and times of this role.</b></p><p></p><p>
About You</p><ul><li>
4-year degree, relevant certifications (e.g. GCFA, GREM, GEIR, 13Cubed), or equivalent experience</li><li>
5+ years' direct experience with Security Operations, Incident Response, or Digital Forensics</li><li>
Thorough understanding of advanced security and network concepts (Operating systems, intrusion/detection, TCP/IP, ports, etc.)</li><li>
Expertise with host and network-based security tools (Velociraptor and Google SecOps preferred)</li><li>
Expertise with network monitoring and SOAR use in a SOC environment</li><li>
Knowledge in malware analysis, memory forensics and cloud IR desired</li><li>
Ability to navigate ambiguity and develop working business relationships</li><li>
Ability to demonstrate expert-level analytical expertise, close attention to detail, excellent critical thinking, logic, and adaptive learning</li><li>
Demonstrates leadership skills that assist with driving desired outcomes</li><li>
Excellent written and oral communication skills</li></ul><p></p><p>
This position may be considered for a Remote or Hybrid (known internally at Target as &quot;Flex for Your Day&quot;) work arrangement based on Target's needs. A Remote work arrangement means the team member works full-time from home or an alternate location that's not a Target location, does not have a desk at a Target location and may travel to HQ up to 4 times a year. A Hybrid/Flex for Your Day work arrangement means the team member's core role may be performed either remote or onsite at a Target location depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target.</p><p></p>
This position may be considered for a Remote or Hybrid (known internally at Target as &quot;Flex for Your Day&quot;) work arrangement based on Target's needs. A Remote work arrangement means the team member works full-time from home or an alternate location that's not a Target location, does not have a desk at a Target location and may travel to HQ up to 4 times a year. A Hybrid/Flex for Your Day work arrangement means the team member's core role may be performed either remote or onsite at a Target location depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target.<p></p><p><b>
Benefits Eligibility</b></p>
Please paste this url into your preferred browser to learn about benefits eligibility for this role: https://tgt.biz/BenefitsForYou_E<p></p><p><b>
Americans with Disabilities Act (ADA)</b></p><p></p><p>
In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to candidate.accommodations@HRHelp.Target.com. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed through this channel.</p><p></p>
Application deadline is : 03/26/2026</div>

Lead Cybersecurity Analyst - CSIRT (Incident Response)(Remote Or Hybrid)

Confidential Government

<div>
 <p>
  C2 company, marking a pivotal step in the development of the Saudi airports sector. The company manages and operates airports, including domestic and international airports. The company aims to build an advanced network of airports that supports tourism and enhances services quality and operational efficiency to achieve the Saudi Vision 2030 by developing airports and enhancing the investment opportunities.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Operational Tasks
  </strong>
 </p>
 <ul>
  <li>
   Contributes to 24/7 cybersecurity event monitoring activities to detect cyberattacks.
  </li>
  <li>
   Participates in investigation procedures for potential cybersecurity incidents.
  </li>
  <li>
   Develops incident response mechanisms and digital forensics processes.
  </li>
  <li>
   Supports the triage of detected incidents and the prioritization process.
  </li>
  <li>
   Delivers digital forensic analysis of security events and reports required actions.
  </li>
  <li>
   Contributes to preparing necessary reports related to non-compliance with cybersecurity policies.
  </li>
  <li>
   Submits escalation reports for any critical incidents, according to the approved policy and incident response plan.
  </li>
  <li>
   Ensures that all systems and technologies are integrated with cybersecurity monitoring systems.
  </li>
  <li>
   Ensures the inventory and monitoring of technical systems.
  </li>
  <li>
   Develops mechanisms for implementing information security policies, standards, controls, and recommendations.
  </li>
 </ul>
 <p>
  <strong>
   Qualifications and Experience
  </strong>
 </p>
 <p>
  <strong>
   Academic Qualifications
  </strong>
 </p>
 <ul>
  <li>
   Bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
  </li>
 </ul>
 <p>
  <strong>
   Work Experience
  </strong>
 </p>
 <ul>
  <li>
   4&ndash;6 years in the same field.
  </li>
 </ul>
 <p>
  <strong>
   Language Requirements
  </strong>
 </p>
 <ul>
  <li>
   Proficiency in both Arabic and English.
  </li>
 </ul>
 <p>
 </p>
</div>


Incident Response Sr. Specialist

Deloitte

<div>
 <strong>
  Cyber Security I Incident Response Senior Engineer
 </strong>
 <strong>
  ,
 </strong>
 <strong>
  Cairo. Egypt
  <br/>
  <br/>
 </strong>
 <strong>
  Connect to your career at Deloitte
  <br/>
  <br/>
 </strong>
 <strong>
  Deloitte
 </strong>
 <strong>
  ,
 </strong>
 established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 <br/>
 <br/>
 Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across Portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 <br/>
 <br/>
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 <br/>
 <br/>
 <strong>
  Connect to your opportunity.
  <br/>
  <br/>
 </strong>
 As a
 <strong>
  Digital Forensics
 </strong>
 <strong>
  Incident Response Senior Engineer
 </strong>
 <strong>
  ,
 </strong>
 you will be assisting clients with response to Cyber Incidents &amp; getting back to business, this includes data leaks, ransomware, unusual network traffic. Cyber criminals, from insider threat to nation-state sponsored hackers.
 <br/>
 <br/>
 <strong>
  Your Role Will Also Include The Following
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Conduct analysis of log files, Windows event logs (Windows artifacts), and Linux artifacts to identify correlations using EDR, network monitoring tools, and SIEM platforms (e.g., Splunk, Microsoft Security Suite, and CrowdStrike Falcon). The role requires applying knowledge of forensic artifacts across various client platforms.
  </li>
  <li>
   Conduct in-depth analysis of malware, threat intelligence, and other relevant sources.
  </li>
  <li>
   Provide tactical support such as advice on triage, containment, eradication, and broader coordination during cyber incidents.
  </li>
  <li>
   Perform forensic analysis of systems and networks.
  </li>
  <li>
   Execute memory forensics.
  </li>
  <li>
   Perform Compromise Assessments and Threat Hunting projects in SIEM and EDR tooling.
  </li>
  <li>
   Create custom scripts (using Python) for parsing special log files, data sets, and images, etc.
  </li>
  <li>
   Create complex timelines based on findings and observations.
  </li>
  <li>
   Act as a member of the broader Deloitte Response Team, adding CIR skills to the overall team that includes privacy, crisis management, crisis communication, forensic investigations, and ICS/OT.
  </li>
  <li>
   Partake in the EMEA and Global technical incident responder community to build a strong network and share a knowledge base.
  </li>
  <li>
   Maintain flexible working hours to support the customer during high-impact incidents.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Connect To Your Skills And Professional Experience
  <br/>
  <br/>
 </strong>
 To succeed in this role, you need to have the following:
 <br/>
 <br/>
 <ul>
  <li>
   At least 3 years of experience in Cyber Incident Response and digital forensics, or similar response experiences in operational environments.
  </li>
  <li>
   Hands-on skills to perform sharp and in-depth analyzes, both using tooling such as EDR and network sensors, but also manual analysis, if the tools are not available.
  </li>
  <li>
   Broader experience in other technical areas of information security, such as penetration testing, threat intelligence or security operations, is beneficial.
  </li>
  <li>
   Experience in systems and/or network administration, engineering or architecture is a highly advantageous.
  </li>
  <li>
   Ability to work under pressure and keep track of the big picture while performing in-depth analysis.
  </li>
  <li>
   Ability to apply analytical insights at an organizational level, considering wider implications and threat actor attack paths and lifecycles.
  </li>
  <li>
   Relevant academic qualifications such as Master&rsquo;s or bachelor&rsquo;s degree in computer science, information security or related fields.
  </li>
  <li>
   Relevant industry qualifications to demonstrate understanding, for example CISSP, CISM, GCFE, GCFA, GREM, GCIH, CCIM, GCIA, CCNIA, CCHIA, CCMRE or similar
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  The Following Attributes Are Essential
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong written, verbal and presentation skills.
  </li>
  <li>
   A willingness to work as part of a diverse team.
  </li>
  <li>
   A commitment to continuous improvement and lifelong learning.
  </li>
  <li>
   A passion for technology and a drive to deliver secure, high-quality solutions.
  </li>
  <li>
   Strong analytical and problem-solving skills.
  </li>
  <li>
   Excellent communication and interpersonal abilities.
  </li>
  <li>
   Ability to work effectively in a fast-paced and dynamic environment.
  </li>
  <li>
   Proactive and self-motivated with a keen attention to detail.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Connect to your service line &ndash; Technology and Transformation
  <br/>
  <br/>
 </strong>
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 <br/>
 <br/>
 <strong>
  Personal independence
  <br/>
  <br/>
 </strong>
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 <br/>
 <br/>
 <strong>
  Connect to your Industry
  <br/>
  <br/>
 </strong>
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, T&amp;T.
 <br/>
 <br/>
 <strong>
  Connect with your colleagues
  <br/>
  <br/>
 </strong>
 Location: Cairo. Egypt
 <br/>
 <br/>
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 <br/>
 <br/>
 <strong>
  Our commitment to you
  <br/>
  <br/>
 </strong>
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 <br/>
 <br/>
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 <br/>
 <br/>
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 <br/>
 <br/>
 <strong>
  Connect to your next step
  <br/>
  <br/>
 </strong>
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
</div>


Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Senior Engineer, Cairo, Egypt.

DeepSource Technologies

<div><p>Position Overview</p><p>
We are seeking a highly experienced Senior SOC Analyst &ndash; Layer 3 (DFIR) to lead advanced digital forensic investigations and incident response operations within our Cybersecurity Operations Center (SOC) in Jeddah.</p><p>
The selected candidate will act as the highest technical escalation point for major security incidents, conduct in-depth forensic investigations, manage complex breach scenarios, and provide strategic guidance to SOC L1 and L2 teams. This role requires strong hands-on DFIR expertise in enterprise environments, including endpoint, network, cloud, and hybrid infrastructures.</p><p></p><p>
Key Responsibilities</p><p>
1. Advanced Incident Response Leadership</p><ul><li>Lead end-to-end handling of high-severity cybersecurity incidents (Ransomware, APT, data exfiltration, insider threats).</li><li>Direct containment, eradication, and recovery strategies during critical incidents.</li><li>Serve as primary escalation point for SOC L2 investigations.</li><li>Coordinate with IT, Legal, Risk, Compliance, and executive leadership during crisis situations.</li><li>Conduct post-incident reviews and lessons-learned workshops.</li></ul><p></p><p>
2. Digital Forensics Investigations</p><ul><li>Perform forensic acquisition and analysis of endpoints, servers, and cloud workloads.</li><li>Conduct disk, memory, and network forensics using industry-standard tools.</li><li>Preserve and maintain chain-of-custody documentation.</li><li>Analyze artifacts such as registry, event logs, browser history, persistence mechanisms, and lateral movement traces.</li><li>Prepare forensic reports suitable for executive and legal review.</li></ul><p></p><p>
3. Endpoint &amp; EDR Deep Analysis</p><ul><li>Perform deep investigations using enterprise EDR platforms such as</li></ul><p>
Microsoft Defender for Endpoint,</p><p>
CrowdStrike Falcon, or equivalent.</p><ul><li>Conduct advanced threat hunting and behavioral analysis.</li><li>Reverse-engineer suspicious scripts or malware (basic to intermediate level).</li></ul><p></p><p>
4. SIEM &amp; Log Correlation Expertise</p><ul><li>Conduct advanced log analysis across SIEM platforms such as</li></ul><p>
Splunk Enterprise Security,</p><p>
Microsoft Sentinel, or equivalent.</p><ul><li>Develop and optimize advanced detection queries (SPL / KQL).</li><li>Correlate endpoint, network, identity, and cloud telemetry for full attack chain reconstruction.</li><li>Map incidents to MITRE ATT&amp;CK framework techniques.</li></ul><p></p><p>
5. Network &amp; Cloud Forensics</p><ul><li>Analyze PCAP, NetFlow, DNS, proxy, and firewall logs.</li><li>Investigate suspicious lateral movement and command-and-control traffic.</li><li>Perform forensic investigations within Microsoft 365, Azure, and AWS environments.</li><li>Assess identity compromise scenarios (AD, Azure AD, privileged access abuse).</li></ul><p></p><p>
6. Threat Intelligence &amp; Proactive Defense</p><ul><li>Integrate threat intelligence feeds into DFIR investigations.</li><li>Conduct proactive threat hunting campaigns.</li><li>Participate in red team / purple team exercises.</li><li>Identify detection gaps and recommend defensive improvements.</li></ul><p></p><p>
7. Governance &amp; Compliance Support</p><ul><li>Ensure forensic readiness aligned with NCA ECC, SAMA CSF, ISO 27001, and other regulatory frameworks.</li><li>Maintain forensic documentation aligned with legal admissibility standards.</li><li>Contribute to incident response policy and playbook development.</li></ul><p></p><p>
8. On-Call &amp; Crisis Response</p><ul><li>Participate in 24x7 on-call rotation for major incidents.</li><li>Provide immediate response and executive-level briefing during critical cybersecurity events.</li></ul><p></p><b><br>
Requirements</b><p><br>
Candidates must demonstrate proven, hands-on DFIR experience in:</p><ul><li>Minimum 7&ndash;10 years of experience in cybersecurity operations.</li><li>At least 3&ndash;5 years in L3 / DFIR role handling major enterprise incidents.</li><li>Practical experience with forensic tools such as:</li></ul><p>
o EnCase</p><p>
o FTK</p><p>
o X-Ways</p><p>
o Volatility</p><p>
o Autopsy</p><ul><li>Memory forensics and live response techniques.</li><li>Ransomware investigation and recovery coordination.</li><li>Advanced Windows &amp; Linux artifact analysis.</li><li>Network protocol deep understanding (TCP/IP, DNS, HTTP/S, SMB, LDAP, Kerberos).</li><li>Cloud security investigations (Azure / AWS / M365).</li><li>Evidence handling and chain-of-custody documentation.</li><li>Experience working in regulated sectors (Banking, Government, Critical Infrastructure preferred).</li></ul></div><p></p>

Senior SOC Analyst L3 - Saudi National - Jeddah, KSA

CGS Federal (Contact Government Services)

<div>
 Digital Forensic Analyst
 <br/>
 <br/>
 Employment Type: Full-Time, Mid-Level
 <br/>
 <br/>
 Department: Forensics
 <br/>
 <br/>
 CGS is seeking a Digital Forensic Analyst whose primary focus will be on the preservation &amp; collection of mobile device and cloud-stored data. This candidate should be fluent in a broad range of forensic technologies and interested in taking on a primary role in a quickly expanding forensics department. This position will include travel for on-site collection efforts as well as an in-office presence at the primary firm office which includes the forensics lab and data center. This firm prioritizes a lean-team approach and a very employee-centric culture that encourages professional growth and active roles for all team members.
 <br/>
 <br/>
 CGS brings motivated, highly skilled, and creative people together to solve the government&rsquo;s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities.
 <br/>
 <br/>
 Skills and attributes for success:
 <br/>
 <br/>
 <br/>
 <ul>
  <li>
   Perform forensic data collection and basic forensic analysis in both on-site and remote capacity
  </li>
  <li>
   Coordinate directly with legal teams/client IT departments to understand project scope
  </li>
  <li>
   Maintain forensic tool set by staying current on version updates and new options in the market
  </li>
  <li>
   Work closely with project management and other team members on completing complex projects in a fast pace, deadline-driven environment
  </li>
  <li>
   Assist in developing, documenting, and refining procedures to accomplish discovery process requirements
  </li>
  <li>
   Manage all chain of custody best practices associated with the rules of evidence
  </li>
  <li>
   Consistently adhere to standard operating procedures
  </li>
  <li>
   Perform quality checks on work products prior to delivering to the client
  </li>
  <li>
   Complete additional duties assigned by the manager including general IT functions
   <br/>
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Qualifications:
 <br/>
 <br/>
 <br/>
 <ul>
  <li>
   Minimum of an undergraduate degree, preferably in Digital Forensic Science or Computer Science/Engineering
  </li>
  <li>
   1+ years of relevant experience in where the analyst understands the forensic lifecycle and can properly perform scoping activities, evidence acquisitions on a range of devices, and execute forensic analysis at an intermediate level
  </li>
  <li>
   Experience using industry standard forensic tools such as:
  </li>
  <li>
   EnCase
  </li>
  <li>
   Cellebrite
  </li>
  <li>
   Oxygen
  </li>
  <li>
   FTK Imager
  </li>
  <li>
   MacQuisition
  </li>
  <li>
   X1 Social Discovery
  </li>
  <li>
   Logicube Falcon
  </li>
  <li>
   General understanding of Mac/Windows filesystems, mobile devices, and encryption
  </li>
  <li>
   Experience preserving desktops, laptops, mobile devices/tablets, servers, both cloud and on-premise email implementations, nontraditional cloud data sources, social media, etc. in a forensically sound manner
  </li>
  <li>
   Ability to communicate effectively and tactfully in both verbally and in written format to team members and technical/non-technical clients
  </li>
  <li>
   Ability to work extended hours when necessary to ensure client deadlines are met
  </li>
  <li>
   Ability to demonstrate superior organizational skills with acute attention to detail
  </li>
  <li>
   Must be willing to travel regularly on short notice; must have a valid passport for occasional international travel
  </li>
  <li>
   Must be an energetic self-starter who can work within a team environment but also independently as the situation requires
  </li>
  <li>
   Ability to document forensic workflows based on sound industry practice
  </li>
  <li>
   Willingness to develop/train other team members to increase the group&rsquo;s overall knowledge base as well as cultivate secondary resources to assist in larger collection events
  </li>
  <li>
   Strong troubleshooting skills coupled with the ability to solve on the fly to solve complex problems
   <br/>
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Ideally, you will also have:
 <br/>
 <br/>
 <br/>
 <ul>
  <li>
   Understanding of the electronic discovery reference model (EDRM)
  </li>
  <li>
   Possess at least one industry-standard certification (EnCE, CCE, CCFE, GCFE, GCFA, CCO, CCPA, CCME, etc.)
  </li>
  <li>
   General knowledge of litigation support applications (e.g. Relativity, Concordance, Nuix, LAW PreDiscovery, etc.)
  </li>
  <li>
   Experience working with structured data exported from various platforms including analysis, custom scripting, and data manipulation to develop reports for client use
  </li>
  <li>
   Understanding of (Robo/Rich) copy tools, BAT (PowerShell) scripting, and Active Directory
  </li>
  <li>
   Experience with scripting, programming/coding, and database languages (SQL, VB, HTML, Access)
   <br/>
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Our Commitment:
 <br/>
 <br/>
 Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client&rsquo;s specific needs. We are committed to solving the most challenging and dynamic problems.
 <br/>
 <br/>
 For the past seven years, we&rsquo;ve been growing our government-contracting portfolio, and along the way, we&rsquo;ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work.
 <br/>
 <br/>
 Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come.
 <br/>
 <br/>
 We care about our employees. Therefore, we offer a comprehensive benefits package.
 <br/>
 <br/>
 <br/>
 <ul>
  <li>
   Health, Dental, and Vision
  </li>
  <li>
   Life Insurance
  </li>
  <li>
   401k
  </li>
  <li>
   Flexible Spending Account (Health, Dependent Care, and Commuter)
  </li>
  <li>
   Paid Time Off and Observance of State/Federal Holidays
   <br/>
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
 <br/>
 <br/>
 Join our team and become part of government innovation!
 <br/>
 <br/>
 Explore additional job opportunities with CGS on our Job Board:
 <br/>
 <br/>
 https://cgsfederal.com/join-our-team/
 <br/>
 <br/>
 For more information about CGS please visit: https://www.cgsfederal.com or contact:
 <br/>
 <br/>
 Email: info@cgsfederal.comDigital Forensic Analyst
 <br/>
 <br/>
 Employment Type: Full-Time, Mid-Level
 <br/>
 <br/>
 Department: Forensics
 <br/>
 <br/>
 CGS is seeking a Digital Forensic Analyst whose primary focus will be on the preservation &amp; collection of mobile device and cloud-stored data. This candidate should be fluent in a broad range of forensic technologies and interested in taking on a primary role in a quickly expanding forensics department. This position will include travel for on-site collection efforts as well as an in-office presence at the primary firm office which includes the forensics lab and data center. This firm prioritizes a lean-team approach and a very employee-centric culture that encourages professional growth and active roles for all team members.
 <br/>
 <br/>
 CGS brings motivated, highly skilled, and creative people together to solve the government&rsquo;s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities.
 <br/>
 <br/>
 Skills and attributes for success:
 <br/>
 <br/>
 <br/>
 <ul>
  <li>
   Perform forensic data collection and basic forensic analysis in both on-site and remote capacity
  </li>
  <li>
   Coordinate directly with legal teams/client IT departments to understand project scope
  </li>
  <li>
   Maintain forensic tool set by staying current on version updates and new options in the market
  </li>
  <li>
   Work closely with project management and other team members on completing complex projects in a fast pace, deadline-driven environment
  </li>
  <li>
   Assist in developing, documenting, and refining procedures to accomplish discovery process requirements
  </li>
  <li>
   Manage all chain of custody best practices associated with the rules of evidence
  </li>
  <li>
   Consistently adhere to standard operating procedures
  </li>
  <li>
   Perform quality checks on work products prior to delivering to the client
  </li>
  <li>
   Complete additional duties assigned by the manager including general IT functions
   <br/>
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Qualifications:
 <br/>
 <br/>
 <br/>
 <ul>
  <li>
   Minimum of an undergraduate degree, preferably in Digital Forensic Science or Computer Science/Engineering
  </li>
  <li>
   1+ years of relevant experience in where the analyst understands the forensic lifecycle and can properly perform scoping activities, evidence acquisitions on a range of devices, and execute forensic analysis at an intermediate level
  </li>
  <li>
   Experience using industry standard forensic tools such as:
  </li>
  <li>
   EnCase
  </li>
  <li>
   Cellebrite
  </li>
  <li>
   Oxygen
  </li>
  <li>
   FTK Imager
  </li>
  <li>
   MacQuisition
  </li>
  <li>
   X1 Social Discovery
  </li>
  <li>
   Logicube Falcon
  </li>
  <li>
   General understanding of Mac/Windows filesystems, mobile devices, and encryption
  </li>
  <li>
   Experience preserving desktops, laptops, mobile devices/tablets, servers, both cloud and on-premise email implementations, nontraditional cloud data sources, social media, etc. in a forensically sound manner
  </li>
  <li>
   Ability to communicate effectively and tactfully in both verbally and in written format to team members and technical/non-technical clients
  </li>
  <li>
   Ability to work extended hours when necessary to ensure client deadlines are met
  </li>
  <li>
   Ability to demonstrate superior organizational skills with acute attention to detail
  </li>
  <li>
   Must be willing to travel regularly on short notice; must have a valid passport for occasional international travel
  </li>
  <li>
   Must be an energetic self-starter who can work within a team environment but also independently as the situation requires
  </li>
  <li>
   Ability to document forensic workflows based on sound industry practice
  </li>
  <li>
   Willingness to develop/train other team members to increase the group&rsquo;s overall knowledge base as well as cultivate secondary resources to assist in larger collection events
  </li>
  <li>
   Strong troubleshooting skills coupled with the ability to solve on the fly to solve complex problems
   <br/>
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Ideally, you will also have:
 <br/>
 <br/>
 <br/>
 <ul>
  <li>
   Understanding of the electronic discovery reference model (EDRM)
  </li>
  <li>
   Possess at least one industry-standard certification (EnCE, CCE, CCFE, GCFE, GCFA, CCO, CCPA, CCME, etc.)
  </li>
  <li>
   General knowledge of litigation support applications (e.g. Relativity, Concordance, Nuix, LAW PreDiscovery, etc.)
  </li>
  <li>
   Experience working with structured data exported from various platforms including analysis, custom scripting, and data manipulation to develop reports for client use
  </li>
  <li>
   Understanding of (Robo/Rich) copy tools, BAT (PowerShell) scripting, and Active Directory
  </li>
  <li>
   Experience with scripting, programming/coding, and database languages (SQL, VB, HTML, Access)
   <br/>
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Our Commitment:
 <br/>
 <br/>
 Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client&rsquo;s specific needs. We are committed to solving the most challenging and dynamic problems.
 <br/>
 <br/>
 For the past seven years, we&rsquo;ve been growing our government-contracting portfolio, and along the way, we&rsquo;ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work.
 <br/>
 <br/>
 Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come.
 <br/>
 <br/>
 We care about our employees. Therefore, we offer a comprehensive benefits package.
 <br/>
 <br/>
 <br/>
 <ul>
  <li>
   Health, Dental, and Vision
  </li>
  <li>
   Life Insurance
  </li>
  <li>
   401k
  </li>
  <li>
   Flexible Spending Account (Health, Dependent Care, and Commuter)
  </li>
  <li>
   Paid Time Off and Observance of State/Federal Holidays
   <br/>
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
 <br/>
 <br/>
 Join our team and become part of government innovation!
 <br/>
 <br/>
 Explore additional job opportunities with CGS on our Job Board:
 <br/>
 <br/>
 https://cgsfederal.com/join-our-team/
 <br/>
 <br/>
 For more information about CGS please visit: https://www.cgsfederal.com or contact:
 <br/>
 <br/>
 Email: info@cgsfederal.com
 <br/>
 <br/>
 #CJ
 <br/>
 <br/>
 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
</div>


Digital Forensic Analyst I

Search 10000+ Digital forensics analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 digital forensics analyst jobs Near Me

Specialist, Digital Forensics & Incident Response

Lead Cybersecurity Analyst - CSIRT (Incident Response)(Remote Or Hybrid)

Incident Response Sr. Specialist

Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Senior Engineer, Cairo, Egypt.

Senior SOC Analyst L3 - Saudi National - Jeddah, KSA

Digital Forensic Analyst I

Digital Forensic Analyst I