> Markdown version of [/jobs/ext/2712643-cyber-analyst-digital-forensics-incident](https://www.wearedevelopers.com/jobs/ext/2712643-cyber-analyst-digital-forensics-incident). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Analyst, Digital Forensics Incident - **Company:** AT-Bay, Inc. - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $80,000.0 - $115,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, CompTIA Security+, Cyber Security, Information Systems, Computer Engineering, Digital Forensics, Information Technology Operations, Intrusion Detection and Prevention, Network Architecture, Cloud Services, Computer Network Operations, Cloud Platform System, Malware, Information Technology - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/cyber-analyst-digital-forensics-incident-response-at-bay-4521827 ## About the Role * Previous digital forensics and incident response experience * Strong oral and written communication skills * Previous hands-on experience performing digital forensics and incident response, including several of the following: + Business Email Compromise, * Bachelor's degree or equivalent * Minimum of 2 years of experience in cybersecurity operations, incident response, incident recovery, or another security discipline * Willingness to travel as needed to perform job functions, * Significant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurity * Previous background in law enforcement or government/military with experience leading complex technical investigations * Knowledge of cloud environments, including knowledge of cloud security products and services offered by major cloud service providers (e.g., AWS, Azure, Google) * Experience in a top-10 cyber consulting firm or leading DFIR provider preferred * One or more industry cybersecurity certifications (e.g., GCIH, Security+, CISSP, etc.) ## Description * Cybersecurity Analysts focused on Digital Forensics and Incident Response (DFIR) deliver incident investigation and response services to At-Bay insureds via: + Forensically sound collection, transmission, and storage of digital evidence + Analysis of digital evidence to identify indicators of compromise and adversary activity + Development of incident timelines and theories of compromise + Identification of incident root causes + Participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.) + Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary + Development and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessary + Development and delivery of recommendations to mitigate the risk of future incidents for impacted insureds + Development and delivery of incident response training and simulations for targeted insureds, + Digital evidence collection and analysis + Development and analysis of cyber threat intelligence + Leadership of or participation in investigations involving digital evidence + Intrusion detection / cyber threat hunting + Malware analysis + Incident recovery activities such as restoration of data from backups, operation of decryptor tools, etc. * Previous hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.) ## Related Videos - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)