> Markdown version of [/jobs/ext/2677218-lead-analyst-information-security-forensics](https://www.wearedevelopers.com/jobs/ext/2677218-lead-analyst-information-security-forensics). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Analyst, Information Security (Forensics)

- **Company:** RXO, Inc.
- **Location:** Charlotte, NC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Cloud Computing, Cyber Security, Linux, Digital Forensics, Enterprise Software Applications, Information Technology
- **Published:** September 2, 2026
- **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/18159737?backUrl=%2Fcareer%2F18159737%2FLead-Analyst-Information-Security-Forensics-North-Carolina-Charlotte

## About the Role

* Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, Criminal Justice, or a related field; or equivalent work experience., * 6+ years of experience in digital forensics, incident response, cybersecurity investigations, or related information security disciplines.
 * Experience conducting enterprise forensic investigations involving Windows, Linux, cloud platforms, email systems, and mobile devices.
 * Experience supporting legal, HR, compliance, or regulatory investigations.

Preferred Experience

 * Experience with eDiscovery and litigation support.
 * Experience in highly regulated environments.
 * Prior experience leading major incident investigations

## Description

* Lead digital forensic investigations involving security incidents, suspected policy violations, litigation support, and regulatory inquiries.
 * Collect, preserve, analyze, and document digital evidence from endpoints, servers, cloud platforms, mobile devices, email systems, and other enterprise technologies.
 * Maintain strict chain-of-custody controls and evidence handling procedures to ensure admissibility and defensibility of findings.
 * Conduct forensic triage, scoping, root-cause analysis, timeline reconstruction, and artifact analysis during cybersecurity incidents.
 * Partner with Legal, Human Resources, Compliance, Internal Audit, and business leaders to support investigations and fact-finding efforts.
 * Prepare comprehensive investigative reports, executive summaries, and technical findings for various audiences.
 * Support incident response activities, including containment, eradication, recovery, and lessons learned.
 * Maintain forensic methodologies, playbooks, procedures, and tooling to support operational excellence.
 * Evaluate emerging forensic technologies, threat trends, and investigative techniques.
 * Provide expert testimony, affidavits, or forensic support documentation when required.
 * Mentor and provide guidance to less experienced analysts and incident responders.
 * Ensure investigative processes align with regulatory, legal, and organizational requirements.

People Manager Responsibilities

This position does not have direct people management responsibilities. However, incumbents may mentor, coach, train, and provide technical leadership to junior analysts and cross-functional team members.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)