Security Operator I

Conduct digital forensics and incident response investigations across endpoints, servers, networks, cloud platforms, and authentication systems. Acquire and preserve evidence with proper chain-of-custody, reconstruct timelines and attack paths, and analyze disk, memory, logs, and telemetry to identify attacker techniques and dwell time. Triage and investigate security alerts using SIEM/EDR, execute IR playbooks, produce defensible forensic reporting, and support SOC and incident response teams during complex, high-severity events.