Endpoint forensics jobs

Cyber Security Incident Response Analyst – Intermediate

Agile Defense · Posted Nov 9, 2026

Open

Ft. Huachuca, Arizona, United States
2–5 years

Apply with RefersoAI

Cyber Security Incident Response Analyst – Intermediate

Agile Defense · Posted Nov 9, 2026

Open

Ft. Huachuca, Arizona, United States
2–5 years

Apply with RefersoAI

Cybersecurity Incident Response & Digital Forensics Specialist

Softthink Solutions Inc · Posted Nov 3, 2026

Open

Remote, United States
Remote
Full-time · Senior
8+ years

Apply with RefersoAI Apply on careers page

The role involves supporting time-sensitive cybersecurity incident investigations, forensic analysis, and threat response activities within federal IT environments.

Responsibilities

Conduct rapid cybersecurity incident triage, forensic investigations, and security assessments to identify potential exploitation, unauthorized access, and system compromise.
Investigate vulnerabilities listed in the CISA Known Exploited Vulnerabilities (KEV) Catalog and assess potential exploitation across enterprise IT environments.
Analyze endpoint, network, application, authentication, SIEM, EDR, vulnerability scanning, and cloud audit logs to identify suspicious activities and indicators of compromise.
Perform forensic investigations to identify persistence mechanisms, privilege escalation, lateral movement, command-and-control communications, and potential data exposure.
Collect, preserve, analyze, and document digital evidence following NIST SP 800-86 and established forensic evidence-handling practices.

Requirements

Bachelor's degree in Cybersecurity
Computer Science
Information Technology
Nice to have: federal agencies experience
Nice to have: NIST SP 800-53

Skills

cybersecurity incident response digital forensics

Cybersecurity Threat Hunter

University of Maryland Global Campus · Posted Jun 17, 2026

Open

Adelphi, Maryland, United States
Hybrid
Full-time
$120K–$135K per year
6–8 years

Apply with RefersoAI Apply on careers page

Lead proactive threat hunting activities across endpoints, network, and cloud environments to detect anomalous behaviors and emerging threats.

Compensation

Hiring Range: $120,000.00 - $135,000.00

Responsibilities

Lead proactive threat hunting activities across endpoints, network, and cloud environments to detect anomalous behaviors and emerging threats.
Analyze large security logs to identify patterns of malicious activity and Indicators of Compromise (IOCs) using our SIEM and EDR platforms, augmenting analysis with threat intelligence feeds.
Develop and refine hypotheses for hunting campaigns based on current threat landscape and adversary TTPs (e.g., MITRE ATT&CK).
Collaborate with the bigger Information Security team and other cross-functional teams to triage, elevate, and respond to identified threats.
Design and implement custom detection logic and rules to improve threat detection efficacy within SIEM tool.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field (or equivalent experience).
Nice to have: GIAC Cyber Threat Intelligence (GCTI)
Nice to have: GIAC Certified Incident Handler (GCIH)
Nice to have: GIAC Advanced Threat Hunting (GATH)
Nice to have: Certified Threat Intelligence Analyst (CTIA)

Skills

Cyber Defense Response Analyst II

CME Group · Posted Nov 6, 2026

Open

New York, New York, United States
Hybrid
Full-time · Mid
$103K–$172K per year
2+ years

Apply with RefersoAI Apply on careers page

mid-level technical role focused on responding to and remediating cyber incidents at CME Group

Compensation

The pay range for this role is $103,200-$172,000.

Responsibilities

Drive the full incident response lifecycle from initial triage to remediation
Conduct regular threat hunts to identify misconfigurations, detection gaps, and other anomalies
Use AI, Python and REST APIs to build/integrate security tools for incident response needs
Lead regular tabletop exercises to improve team readiness
Contribute continuously to our internal knowledge base of incident response runbooks and playbooks

Requirements

BA/BS in Engineering, Computer Science, or Information Security

Skills

Digital Forensics Incident Response Endpoint Forensics Malware Analysis Threat Hunting AI

Principal Cybersecurity Incident Response Engineer

Wells Fargo · Posted Nov 6, 2026

Open

Chandler, Arizona, United States
Senior
7+ years

Apply with RefersoAI Apply on careers page

Lead technical investigation and response for complex cybersecurity incidents at Wells Fargo.

Responsibilities

Lead technical investigation of complex and high severity cybersecurity incidents
Serve as an escalation point for Tier 1 and Tier 2 analysts
Develop containment, eradication, and recovery recommendations
Support major incident and crisis response activities
Correlate information across endpoint, network, identity, cloud, application, and security telemetry

Skills

Incident Response Enterprise incident response Security operations Endpoint detection and response (EDR)Extended detection and response (XDR)Security information and event management (SIEM)Large scale log analysis Network forensics

Incident Commander, Digital Forensics & Incident Response

BlueVoyant · Posted Nov 5, 2026

Open

Remote, United States
Remote
Full-time · Senior
3–5 years

Apply with RefersoAI Apply on careers page

Lead high-impact cyber investigations and command complex DFIR engagements end-to-end.

Compensation

Competitive compensation and a comprehensive benefits package, with support for wellbeing, development, and career growth.

Responsibilities

Act as incident commander for complex DFIR engagements end-to-end
Serve as the primary client lead, advising executives, legal counsel, insurers and stakeholders
Lead investigations across ransomware, BEC, cloud/identity compromise, insider threat and advanced attacks
Perform and direct forensic analysis across endpoints, cloud, identity, SaaS, email and network environments
Translate technical findings into clear business risk and remediation guidance

Requirements

Bachelor's degree preferred (Cybersecurity, Computer Science, DFIR or a related field)
Nice to have: breach counsel experience
Nice to have: insurers or regulators experience
Nice to have: incident readiness tabletop experience
Nice to have: certifications such as CISSP, GCFA, GCIH, GCFE, GNFA, OSCP

Skills

Incident command DFIR ransomware

Cyber Security Incident Response Analyst – Intermediate

Cyber Security Incident Response Analyst – Intermediate

Responsibilities

Requirements

Skills

Cybersecurity Incident Response & Digital Forensics Specialist

Responsibilities

Requirements

Skills

Cybersecurity Threat Hunter

Compensation

Responsibilities

Requirements

Skills

Cyber Defense Response Analyst II

Compensation

Responsibilities

Requirements

Skills

Principal Cybersecurity Incident Response Engineer

Responsibilities

Skills

Incident Commander, Digital Forensics & Incident Response

Compensation

Responsibilities

Requirements

Skills

Benefits

Benefits

Benefits