Cybersecurity Incident Response & Digital Forensics Specialist
Softthink Solutions Inc · Posted Nov 3, 2026
- Remote, United States
- Remote
- Full-time · Senior
- 8+ years
The role involves supporting time-sensitive cybersecurity incident investigations, forensic analysis, and threat response activities within federal IT environments.
Responsibilities
- Conduct rapid cybersecurity incident triage, forensic investigations, and security assessments to identify potential exploitation, unauthorized access, and system compromise.
- Investigate vulnerabilities listed in the CISA Known Exploited Vulnerabilities (KEV) Catalog and assess potential exploitation across enterprise IT environments.
- Analyze endpoint, network, application, authentication, SIEM, EDR, vulnerability scanning, and cloud audit logs to identify suspicious activities and indicators of compromise.
- Perform forensic investigations to identify persistence mechanisms, privilege escalation, lateral movement, command-and-control communications, and potential data exposure.
- Collect, preserve, analyze, and document digital evidence following NIST SP 800-86 and established forensic evidence-handling practices.
Requirements
- Bachelor's degree in Cybersecurity
- Computer Science
- Information Technology
- Nice to have: federal agencies experience
- Nice to have: NIST SP 800-53