Senior Digital Forensics Analyst - Vice President

Role Description

This role is part of a dynamic team within the SMBC Security Operations Center (SOC) specializing in conducting complex forensic investigations, responding to security incidents, supporting insider risk and other internal investigative matters. The ideal candidate will possess deep technical expertise in digital forensics and the ability to communicate findings effectively to both technical and non-technical stakeholders. This role will be responsible for conducting all parts of the digital forensic process, including but not limited to, preserving relevant data, maintaining Chain of Custody, analyzing digital evidence, conducting forensic examinations, and writing forensic reports. The role requires creativity, critical thinking, strong communication skills, and the ability to work effectively across a large global organization.

Role Objectives

• Coordinate with investigative pillars of the organization (SOC, Insider Risk, HR, Legal, etc.) to improve workflows and support their investigations when necessary.
• Work closely with the Insider Risk Governance team to develop and manage rules and workflows, as well as performing triage for alerts.
• Ensure the confidentiality, integrity, and chain of custody of digital evidence throughout the investigative process.
• Prepare reports on findings and present briefings to colleagues and leadership; serve as a digital forensics subject matter expert.
• Mentor and train junior analysis in forensic procedures and contribute to the evaluation and improvement of existing SOC processes.
• Effectively communicate complex technical concepts and findings to non-technical stakeholders in a clear and concise manner.
• Ensure compliance with legal and regulatory requirements related to digital evidence collection, preservation, and analysis.
• Stay current with the latest developments in digital forensics technology, tools, and methodologies, and provide training and mentorship to team members.
• Provide SME-level support for insider risk matters leveraging deep knowledge of insider risk, cyber security, and counterintelligence.

Qualifications and Skills

• Bachelor’s degree and a minimum of 7 years of relevant experience.
• Industry certifications such as GCFE, GCFA, EnCE, MCFE, GCNA, or other related cybersecurity certifications are highly desirable.
• Proficiency in using forensic tools and techniques, such as AXIOM Cyber, EnCase Enterprise, FTK Enterprise, X-Ways Forensics and common open-source forensics software.
• Ability to leverage multiple data sets and tools to support complex analysis.
• Detail-oriented with a strong commitment to accuracy and quality in all aspects of work.
• Very strong oral and written communication skills, with focus on attention to detail; experience communicating with senior levels.
• Demonstrated expertise responding to cyber incidents and digital forensic investigations at an enterprise level.
• High ethical standards and a commitment to upholding professional integrity and confidentiality.
• Proven ability to strategize and demonstrate ‘out of the box’ thinking and creativity in order, to solve complex problems and deliver practical and effective results.

Additional Requirements