Job description
The Cybersecurity Forensic Analyst role at IBM's Cyber Security Incident Response Team (CSIRT) focuses on investigating and responding to cybersecurity incidents across the Americas. This hands-on analytical position requires strong technical expertise in digital forensics and incident response. The analyst will work closely with various teams to preserve forensic evidence and provide actionable insights for operational response and executive decision-making. Candidates should thrive in high-pressure environments and possess excellent communication skills.
Requirements
- Associate's Degree or College Diploma is required.
- Bachelor's Degree is preferred.
- Years of experience in Incident Response, SOC, and/or Digital Forensics in a global corporate environment is required.
- Strong digital forensics expertise across endpoints, systems, and network artifacts is required.
- Excellent technical writing and presentation skills are required.
Responsibilities
- Conduct forensic investigations on endpoint, network, and cloud environments.
- Collect, preserve, and analyze digital evidence in accordance with established standards.
- Support incident response activities, including triage, containment, eradication, and recovery.
- Correlate forensic evidence with threat intelligence and detection signals.
- Document findings and produce clear, defensible reports for technical and non-technical stakeholders.
Benefits
- IBM offers competitive compensation, healthcare coverage, retirement programs, paid parental leave, tuition assistance, wellness programs, flexible work options, and extensive learning and certification resources.
H-1B filing history
Public USCIS petition and DOL LCA counts · latest USCIS FY2026, LCA FY2026
Filing entity: Ibm Corporation
As of Aug 23, 2026
Initial approvals
656
FY2026
Approval rate
97.2%
FY2026
LCA certified
391
FY2026
Entry-level share
0.0%
FY2026
Initial approvals YoY
+31%
Trend
LCA certified YoY
-85%
Trend
Initial approvals by fiscal year
Approval rate by fiscal year
Continuing vs initial approvals
LCA certified positions by quarter
LCA certified positions by fiscal year
Based on public USCIS and DOL filings; not a sponsorship guarantee.
Is this posting expired or inaccurate?
