Cyber Analyst, Digital Forensics Incident Response

Position Overview

• Location Type: Remote
• Employment Type: Full-time
• Salary: Not specified

Description: At-Bay is a fast-growth InsurSec company focused on protecting small businesses from digital risks. This role focuses on Digital Forensics and Incident Response (DFIR) services, providing investigation and response support to At-Bay’s insureds. The team helps bridge the security capability gap for SMBs, combining insurance with security technologies and expertise. At-Bay currently serves 35,000 customers and aims to expand its reach in the InsurSec market.

Requirements

• Experience: Minimum of 2 years of experience in cybersecurity operations, incident response, incident recovery, or a related field.
• Education: Bachelor’s degree or equivalent.
• Skills:
  • Previous digital forensics and incident response experience.
  • Strong oral and written communication skills.
  • Hands-on experience with:
    • Business Email Compromise
    • Ransomware
    • Digital evidence collection and analysis
    • Cyber threat intelligence
    • Incident recovery activities (e.g., data restoration, reimaging)
    • Malware analysis
    • Intrusion detection / cyber threat hunting

Responsibilities

• Forensically sound collection, transmission, and storage of digital evidence.
• Analysis of digital evidence to identify indicators of compromise and adversary activity.
• Development of incident timelines and theories of compromise.
• Identification of incident root causes.
• Participation in threat actor negotiations (e.g., ransom negotiations).
• Participation in incident recovery activities.
• Development and delivery of incident reports to stakeholders (executive leaders, breach coach attorneys, claims management).
• Development and delivery of recommendations to mitigate future incident risks.
• Development and delivery of incident response training and simulations.

Company Information

At-Bay is an InsurSec company focused on providing innovative security solutions to small businesses. They currently serve 35,000 customers and are expanding their DFIR team. The company's mission is to reduce ransomware attacks and provide comprehensive security protection.