Cybersecurity Forensic Analyst-IBM CISO
IBM
Austin, TX
The Role
The analyst conducts end-to-end forensic investigations across endpoint, network, and cloud environments, collecting and preserving digital evidence in line with chain-of-custody standards. Day-to-day work includes triaging security incidents, reconstructing attack timelines, identifying root cause, and producing defensible reports for both technical and executive audiences.
Skills & Experience
Strong digital forensics expertise is essential, with hands-on experience using tools such as EnCase, FTK, Autopsy, X-Ways, or Axiom. Candidates should be proficient with EDR platforms like CrowdStrike or Microsoft Defender, SIEM correlation, and attacker TTPs. Scripting ability in Python or PowerShell is advantageous, as is exposure to memory forensics.
Who It Suits
This role suits an experienced forensic analyst or IR professional comfortable operating under pressure in a large enterprise environment. Those with a background spanning SOC, DFIR, and threat analysis — who can communicate complex technical findings clearly to non-technical stakeholders — will thrive in this position.
Typical advertised salary for Digital Forensics roles in United States: $92,000–$154,000 (median $122,000 — from 221 recent listings analysed by Forensic Focus).
Learn More/Apply
