Senior Analyst, Forensics
- Remote, United States
- Senior
- Posted 7 days ago
or apply from Claude / ChatGPT / Muse
Forensics analyst on ransomware and compromise investigations, digging through disk, memory and log artifacts to rebuild what happened.
About the role
Someone who can work with little supervision, write findings clearly for both technical and non-technical readers, and keep a case moving on schedule alongside a lead and a tiger team.
At a glance
- Pay
- Not stated in the posting
- Remote scope
- Remote, United States
- Seniority
- Senior
- Skills
- EnCase, Axiom, FTK, X-Ways, Splunk, Volatility, Wireshark
- Posted
- 28 Oct 2026
- Last checked
- 2 Nov 2026
What you will do
- Lead forensic analysis on ransomware and compromise cases, supporting the forensic lead
- Examine OS artifacts and recover deleted files across Windows, Linux and Mac, plus memory forensics
- Read network and system logs, including Windows Event, firewall, VPN and unified audit logs
- Pull indicators of compromise from EDR alerts with the security operations center
- Write incident findings and reports in a clear timeline, and peer review teammates' reports
What they look for
- Degree in digital forensics, cybersecurity, computer science or a related field with four or more years in incident response or forensics
- Deep knowledge of Windows and Unix or Linux disk forensics and memory forensics
- Two or more certifications such as Security+, Network+, GCED, GCIH, GCFE, GCFA, CEH, CHFI or EnCe
- Able to set priorities, work independently and handle confidential data
Nice to have
- Presenting technical findings to a non-technical audience
- Leading teams of analysts
How Keywordise applies for you
Alex Demo
[email protected]
From your CV
Yes, fully remote
- Sent
- 09:41
- Attached
- Your tailored CV
- 1Upload your CVAdd your CV once. It takes about a minute.
- 2Tailored to this jobKeywordise writes a CV and a cover letter for this job from your real experience.
- 3The form fills itselfName, email, experience and screening questions, field by field.
- 4Application sentYou get a receipt and follow it in your dashboard.
Apply with Keywordise AI7-day free trial, no card.
Apply from your AI assistant
Connect Keywordise to your assistant once, then send it the prompt. It applies for you.
Claude
- In Claude, open Settings, then Connectors, and choose Add custom connector.
- Name it Keywordise and paste the connector URL.
- Click Connect, log in to Keywordise and approve. Then send the prompt in a new chat.
https://keywordise.com/mcpDisconnect any time in your Keywordise settings.
ChatGPT
- In ChatGPT, open Settings, then Connectors. On plans that need it, turn on developer mode first.
- Add a new connector with the connector URL and choose OAuth. Leave the client ID and secret empty.
- Log in to Keywordise and approve. Then send the prompt in a new chat.
https://keywordise.com/mcpDisconnect any time in your Keywordise settings.
Muse
- Open Muse (muse.ai or the app) and send it the message below.
- If Muse asks how to sign in, answer OAuth. Open the sign-in link it sends, log in to Keywordise and approve.
- Send the prompt. Muse asks before it sends anything.
Add a custom connector called Keywordise. It is a remote MCP server at https://keywordise.com/mcp and uses OAuth. Give me the sign-in link.Muse is available in the US only for now.
Apply to Keywordise job 7rfc2cfqkzQuestions about this job
Is this a remote job, and where can I work from?
Yes. The posting lists Senior Analyst, Forensics as a remote role for candidates in the United States.
What does this job pay?
No pay range is stated in the posting.
What experience is needed?
It is a senior role. The posting asks for: degree in digital forensics, cybersecurity, computer science or a related field with four or more years in incident response or forensics; deep knowledge of Windows and Unix or Linux disk forensics and memory forensics; two or more certifications such as Security+, Network+, GCED, GCIH, GCFE, GCFA, CEH, CHFI or EnCe. Skills it names include EnCase, Axiom, FTK, X-Ways.
How do I apply with Keywordise AI?
Select Apply with Keywordise AI, sign up and upload your CV. Keywordise writes a CV and a cover letter for this job from your real experience and applies for you. The 7-day free trial needs no card.
More remote business and finance jobs
- A short-term IT consulting engagementIBM webMethods Consultant
- Remote, worldwide
- PAPalo Alto NetworksProfessional Services Consultant, XSIAM
- Remote, United States
- EExtendDirector of Compliance
- Remote, United States
- A US-based small business lenderUnderwriting Analyst
- Remote, Colombia
- AGThe Access GroupAccounts Receivable Specialist
- Remote, United States
- WWeekdayTax Expert (CPA or EA)
- Remote, United States