The IBM Cyber Security Incident Response Team (CSIRT) is seeking a Cybersecurity Forensic Analyst to investigate and respond to cybersecurity incidents across the Americas. This role involves working closely with incident responders, threat detection teams, and leadership to analyze security events and preserve forensic evidence. The successful candidate will need to demonstrate strong technical skills and the ability to communicate complex findings effectively. This position is critical in driving timely containment and remediation of incidents.

• 3-5 years of experience in Incident Response, SOC, and/or Digital Forensics in a global corporate environment.
• Strong digital forensics expertise across endpoints, systems, and network artifacts.
• Ability to collect, preserve, and analyze evidence while maintaining chain of custody.
• Excellent technical writing and presentation skills.
• Basic scripting/automation skills in languages such as Python or PowerShell are a plus.

• Conduct forensic investigations on endpoint, network, and cloud environments.
• Collect, preserve, and analyze digital evidence in accordance with established standards.
• Support incident response activities, including triage, containment, eradication, and recovery.
• Correlate forensic evidence with threat intelligence and detection signals.
• Document findings and produce clear, defensible reports for technical and non-technical stakeholders.

• IBM offers competitive compensation, healthcare coverage, retirement programs, paid parental leave, tuition assistance, wellness programs, flexible work options, and extensive learning and certification resources.