Work Schedule
Other

Environmental Conditions
Office

Job Description

Lead Digital Forensics Incident Response Analyst

Join the dynamic team at Thermo Fisher Scientific as a Lead Digital Forensic Incident Response Analyst, leveraging your expertise to enhance digital forensics and incident response, reducing risk and improving our capabilities globally

What will you do?

• Conduct digital forensic investigations in response to high or critical security incidents, independently or as part of a team.
• Develop and share relevant threat intelligence with team members to improve existing detection and response capabilities.
• Lead the development of forensic playbooks and scalable procedures, recommending technical solutions to reduce risk across the enterprise.
• Develop solutions and strategies to build and deploy scalable tools for incident response for the team and the global SOC.
• Act as a mentor and provide guidance to junior team members.
• Apply your knowledge of the current and emerging threat landscape to active threat hunting exercises.

• Bachelor's Degree or equivalent experience in cybersecurity, computer science, engineering, or another relevant field.
• Relevant technical certifications a plus, such as GCIH, GCFA, GCFE, GREM, GCTI, and others.

• Extensive experience in combined cybersecurity, particularly in forensics, architecture, and incident response.
• Proficiency in using tools like Magnet Axiom, AccessData FTK, Encase, X-Ways, The Sleuth Kit/Autopsy, Volatility, Windows, Linux, and MacOS
• Experience automating workflows with PowerShell, Bash, or Python.
• Familiarity with the TCP/IP suite of protocols.
• Demonstrable experience leading forensic investigations based on EDR, XDR, memory, disk, and log-based evidence.
• Experience conducting static and dynamic malware reverse engineering.
• In-depth knowledge of Cloud, Web Application, and API security, including conducting forensic investigations on their technology stacks.

• Ability to explain technical details to business leadership with a focus on encouraging technical changes or investment where appropriate