Senior Digital Forensics and Incident Response Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior DFIR Engineer leading identity-theft investigations and automation for Humana, a U.S. healthcare and insurance company. Supporting enterprise cyber investigations, incident response, and forensic capability development.
Responsibilities:
- Provide forensics technical expertise and investigations support to cybersecurity defense stakeholders
- Lead and advance Humana’s response to identity theft, account takeover, and associated fraud activities
- Investigate identity-based threats and conduct forensic analysis to determine attack methods and root causes
- Coordinate response activities to mitigate risk and protect Humana associates, members, and assets
- Develop, implement, and continuously improve automation, detection capabilities, and investigative workflows
- Enable scalable identification, triage, and response to identity fraud campaigns
- Assess and correlate incident data to identify vulnerabilities and provide forensic analysis recommendations for remediation
- Manage a real-time forensic capability that collects, assesses, and analyzes data correlations
- Create reports for EIP leadership with in-depth investigative analysis of possible root causes
- Support enterprise cyber investigations, incident response, forensic analysis, and enhancement of forensic capabilities
- Influence department strategy through technical leadership, operational excellence, and automation initiatives
- Make decisions on technical approaches for project components and determine objectives and approaches independently
Requirements:
- 3+ years Cyber Security experience
- 3+ years Digital Forensics and/or Incident Response experience
- 3+ years experience working with Splunk, including authoring queries, alerting, and dashboard development
- 5+ years Digital Forensics experience, including FTK, Axiom, EnCase, and other forensics tools (desirable)
- GIAC/SANS GCFE, GCFA, GIME, and/or GASF certifications (desirable)
- 2+ years cloud forensics/incident response (desirable)
- 1+ years working with and/or investigations of artificial intelligence systems (desirable)
- Must reside within 60 minutes of a listed metropolitan location or be willing to relocate
- Ability to provide high-speed fiber, DSL, or cable modem for a home office
- Minimum internet speed of 25 Mbps download and 10 Mbps upload
- Satellite and wireless internet service is not allowed
- Dedicated workspace without ongoing interruptions to protect member PHI/HIPAA information
- Mandatory participation in an on-call rotation
Benefits:
- Bonus incentive plan based on company and/or individual performance
- Medical, dental, and vision benefits
- 401(k) retirement savings plan
- Paid time off
- Company and personal holidays
- Paid parental and caregiver leave
- Short-term and long-term disability
- Life insurance
- Internet expense payment for associates or contractors who live and work from home in California
Similar Jobs
Senior Offensive Security Engineer
Senior offensive security engineer testing First Advantage’s products, cloud infrastructure, networks, and people. Building adversary simulations and driving remediation to reduce enterprise risk.
Security Engineer
Security Engineer securing PIP Labs’ DATA Network infrastructure, cloud environment, endpoints, and internal systems. Automating security operations and protecting sensitive real-world data used for AI training.
Senior macOS Engineer – Workforce AI Security
Senior macOS Engineer owning native endpoint security agents for Check Point’s enterprise AI platform. Building TLS interception, proxy controls, and data-loss protections across managed Macs.
IT/OT Security Architect
IT/OT Security Architect designing secure IT, OT, cloud, and AI architectures for Berlin-based cybersecurity consultancy APT-ONE. Translating regulatory requirements into controls and advising CISOs and technical leaders.
Security Captain – Rotational
Security Captain supervising personnel and protective operations at NMS’s remote Alpine oil field. Managing incidents, emergency response, client coordination, and rotational camp operations.
Senior Security Engineer, Threat & Offensive Security
Senior Security Engineer strengthening offensive security and threat operations. Protecting Valon’s AI-native mortgage servicing platform for regulated finance.
Global Security Architect
Security Architect designing Microsoft 365, Azure, and hybrid security architectures for base-IT’s SME and enterprise customers. Leading security roadmaps, workshops, migrations, and technical standards.
Workday Security Developer
Workday Security Developer building complex enterprise applications and integrations for Carilion Clinic. Leading architecture, troubleshooting, technical standards, and large-scale healthcare technology initiatives.
Specialised Sales, OT Security
OT Security Sales Specialist developing tailored B2B cybersecurity solutions for Swisscom clients. Driving technical sales, new business, upselling, and cross-selling across industrial sectors.
Information Security Consultant
Information Security Consultant advising German cloud, AI, and data-center companies on ISMS and compliance. Delivering audit-ready policies, gap analyses, and practical security solutions.
Senior Information Security Manager
Senior Information Security Manager leading security operations, incident response, and AI governance. Protecting 8am’s payments and workflow platform serving 250,000 U.S. professionals.
Information Security Engineer
Information Security Engineer securing 8am’s cloud, detection, and compliance systems. Protecting fintech software used by over 250,000 U.S. professionals.
Cybersecurity Vulnerability Management Lead
Cybersecurity Vulnerability Management Lead modernizing the NSF Cybersecurity Program for Cherokee Federal. Leading exposure management, prioritization, automation, and enterprise risk reduction.
Senior Director, Information Security and Compliance
Senior security leader advancing Foundant’s SaaS information security and GRC programs. Protecting mission-critical software serving foundations, nonprofits, and community organizations worldwide.
Security Engineer – GRC
Security Engineer owning governance, risk, and compliance for Alan’s health insurance and prevention platform. Managing ISO 27001, DORA, HDS, audits, risk, and security automation.
Associate Security Architect
Associate Security Architect detecting and mitigating cyberattacks for Akamai's managed security customers. Protecting digital properties through Akamai's distributed cloud, edge, and security platform.
Cloud Security Engineer
Cloud Security Engineer securing Azure infrastructure, identities, and AI workloads for a global IT transformation leader. Driving remediation, policy-as-code guardrails, and Microsoft Defender for Cloud posture improvement.
Portuguese Speaking Cybersecurity Customer Expert
Cybersecurity customer experts supporting Portuguese-speaking clients with security software and incident inquiries. Mercier Consultancy Group provides recruitment and BPO services across Europe.
Senior Cybersecurity Financial Compliance SME
Senior cybersecurity compliance SME ensuring DoW and Army audit readiness for ASRC Federal’s Vantage system. Applying NIST controls, FIAR requirements, and financial management overlays.
Security Architect
Arquiteto de Segurança da Informação na Verity, consultoria de transformação e engenharia digital. Projetando controles, riscos e práticas DevSecOps para ambientes Cloud e on-premises.