Responsibilities
Kforce has a client that is seeking a Security Digital Forensics Engineer in San Jose, CA. Key Responsibilities:
- Collect, process, analyze, interpret, preserve, and present digital evidence
- Perform forensic triage of an incident to include determining scope, urgency and potential impact
- Conduct analysis of forensic images, and available evidence in support of forensic write-ups for inclusion in reports and written products
- Document forensic analysis from initial participation through resolution
- Investigate data breaches leveraging traditional forensic tools and Cloud-specific tools to determine the source of compromises and malicious activity
- Demonstrate how to execute common web application attacks like SQL Injection, XSS, CSRF
- Analyze and characterize cyber-attacks unique to Cloud
Requirements
- Relevant industry security certifications such as CISSP, SANS GIAC (e.g. EnCE, GCIH, GNFA, GCFE, GCFA, GREM or additional tool-based certifications), AWS certifications (SAA, SAP, or SCS), etc.
- 6+ years of incident response or digital forensics experience with a passion for cyber security; Or equivalent educational experience in Information Security, Computer Science, Digital Forensics, Cyber Security or related field
- Experience with IoT platforms, large-scale distributed systems, and/or client-server architectures
- Networking experience with LAN/WAN routing and high availability (OSPF, BGP4/iBGP, EIGRP, and NSRP) routing protocols and technologies
- Experience with examining compute, storage, network, IAM, Kubernetes, serverless, and other log sources to identify evidence of malicious activity
- Experience with performing reactive incident response functions in public cloud environments - Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), etc.
- Familiarity with other security verticals such as: Incident Response, Threat Intelligence, Threat Detection, Application Security, Cloud Security, Offensive Security
- Knowledge of detection tools, for example: Nessus, Qualys, OSSEC, Osquery, Suricata, Threatstack, AWS Guard Duty
- Solid understanding of the forensic lifecycle and scoping activities, evidence acquisitions on a range of devices
- Understanding of SaaS, PaaS, and IaaS
- Forensics platforms such as EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and other open-source forensic tools
- Security Incident and Event Monitoring (SIEM) and Security
- Endpoint Detection & Response (EDR)
- Proficient with host-based forensics and data breach response; PCI, SOC 2, and FedRAMP as they relate to incident monitoring and response
- Ability to document forensic workflows based on sound industry practice
The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.
Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.
This job is not eligible for bonuses, incentives or commissions.
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.
