DFIR Analyst Location:

Albany, NY Work Arrangement:

Onsite/Hybrid Type:

Full-time Level:

Junior Level Role Focus Junior-level security operations and incident response role supporting SOC investigations, alert triage, endpoint analysis, incident escalation, and active cybersecurity response. The position will provide exposure to broader DFIR investigations, but the primary day-to-day focus is security operations and incident response rather than forensic lab work. Must currently reside in the Albany, NY area and be willing to work partially onsite. Target Candidate Degree, technical training, internship, or early professional experience in cybersecurity, information technology, or a related field Foundational understanding of Windows systems, networking, Active Directory, and general cybersecurity concepts Familiarity with SIEM, EDR, security alerts, endpoint telemetry, or security monitoring concepts Basic understanding of incident response processes and common attacker techniques Ability to investigate alerts, gather relevant evidence, and clearly document investigative steps and findings Strong analytical skills and attention to detail Comfortable escalating findings and working alongside senior SOC and incident response personnel Exposure to Microsoft 365, Entra ID, CrowdStrike, or similar security platforms is beneficial Familiarity with PowerShell, command-line tools, log analysis, or scripting is a plus Digital forensics knowledge is beneficial but not required Prior internship, military, law enforcement technical, help desk, MSP, NOC, or SOC experience is a plus Eligible to work for any U.S. employer without ever requiring sponsorship or a 3rd party Able to pass a background check Currently living in the Albany, NY area and willing to work hybrid/partially onsite

Preference:

High-potential candidate with strong technical fundamentals who wants to develop into incident response and DFIR. Prior full-time DFIR experience is not required.

Compensation:

$50,000-$70,000 and benefits package