Lead Analyst, Information Security (Forensics)

RXO, Inc.
Charlotte, NC, United States
4 days ago
Apply on diversityjobs.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
6 years minimum
Working hours
Regular working hours

Tech stack

Microsoft Windows Cloud Computing Cyber Security Linux Digital Forensics Enterprise Software Applications Information Technology

Job description

  • Lead digital forensic investigations involving security incidents, suspected policy violations, litigation support, and regulatory inquiries.
  • Collect, preserve, analyze, and document digital evidence from endpoints, servers, cloud platforms, mobile devices, email systems, and other enterprise technologies.
  • Maintain strict chain-of-custody controls and evidence handling procedures to ensure admissibility and defensibility of findings.
  • Conduct forensic triage, scoping, root-cause analysis, timeline reconstruction, and artifact analysis during cybersecurity incidents.
  • Partner with Legal, Human Resources, Compliance, Internal Audit, and business leaders to support investigations and fact-finding efforts.
  • Prepare comprehensive investigative reports, executive summaries, and technical findings for various audiences.
  • Support incident response activities, including containment, eradication, recovery, and lessons learned.
  • Maintain forensic methodologies, playbooks, procedures, and tooling to support operational excellence.
  • Evaluate emerging forensic technologies, threat trends, and investigative techniques.
  • Provide expert testimony, affidavits, or forensic support documentation when required.
  • Mentor and provide guidance to less experienced analysts and incident responders.
  • Ensure investigative processes align with regulatory, legal, and organizational requirements.

People Manager Responsibilities

This position does not have direct people management responsibilities. However, incumbents may mentor, coach, train, and provide technical leadership to junior analysts and cross-functional team members.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, Criminal Justice, or a related field; or equivalent work experience., * 6+ years of experience in digital forensics, incident response, cybersecurity investigations, or related information security disciplines.
  • Experience conducting enterprise forensic investigations involving Windows, Linux, cloud platforms, email systems, and mobile devices.
  • Experience supporting legal, HR, compliance, or regulatory investigations.

Preferred Experience

  • Experience with eDiscovery and litigation support.
  • Experience in highly regulated environments.
  • Prior experience leading major incident investigations

Benefits & conditions

life insurance, paid time off, 401(k), retirement plan, * Comprehensive medical, dental, and vision plans

  • 401(k) retirement plan with up to 5% company match
  • Pre-tax accounts to help streamline eligible expenses
  • Company-paid disability and life insurance
  • Employee Assistance Program (EAP)
  • Career and Leadership Development Programs
  • Paid time off, company holidays, and volunteer days

Our Culture

Our values are the key to our unique culture and our ability to deliver for everyone we serve.

We do great things when we are inclusive and work together. To perform with excellence, we learn from one another, value diverse perspectives, operate safely and build strong relationships.

About the company

RXO is a leading provider of transportation solutions. With cutting-edge technology at the center, we’re revolutionizing the industry with our massive network and commitment to finding solutions for every challenge. We create more efficient ways for shippers and carriers to transport goods across North America.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on diversityjobs.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

52 sec

Running persistent Linux environments directly on Windows

Ben Breard Ben Breard · World Congress 2025

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

2:27 min

Introduction to WebAssembly in a cloud computing context

Edo Edo · World Congress 2024

14:14 min

Addressing audience inquiries on analytical implementation and career growth

Julian Joseph · LIVE

3:55 min

Demonstrating .NET installation on Debian and Azure Linux

Silvano Coriani Silvano Coriani · Europe 2026 Virtual

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · World Congress 2022

Videos

See all

Related articles

See all