Job Seekers can review the Job Applicant Privacy Policy by clicking here.Job Description:SummaryThe Information Security Forensic Analyst is responsible for a broad range of responsibilities with a primary emphasis on supporting the soc 24/7 incident response by providing host and network forensic analysis. The main functions of this role are supporting personnel investigations and remediation of security incidents. The analyst will work closely with the Security incident response teams, the Security Operations Center manager, the threat team, +6the legal team, members of the other security teams, and other internal organizations to successfully lead the remediation and closure activities related to security incidents or potential threats to the company. The Forensic Analyst will leverage security technologies and industry best practices to manage information security incidents, investigations, and related events across the distributed enterprise.Essential FunctionsPlans, coordinates, and directs the inventory, examination, and comprehensive technical analyst of computer related evidence.Distills analytic findings into executive summaries and in-depth technical reports.Serves as a technical forensic liaison to stakeholders and explains investigations details to include forensic methodologies and protocols.Tracks and documents on-site incident response activities and provides updates to leadership throughout the engagement.Acquire/Collect computer artifacts (e.g., malware, user activity, link files) in support of onsite engagements.Correlate forensic findings to network events in support of developing and intrusion narrative.Conduct analysis of forensic images, and available evidence in support of forensic write-ups for inclusion in reports and written products.Track and document forensic analysis from initial participation through resolution.Perform forensic triage of an incident to include determining scope, urgency and potential impact.Additional ResponsibilitiesAssists with leading and coordinating forensic preliminary investigations.Evaluates, extracts, and analyzes suspected malicious code.Triage Electronic devices and assess evidentiary value.Be readily available to participate in collaborative threat analysis meetings with internal and external trusted entities.Performs other duties as assigned.Skills and AbilitiesAbility to create forensically sound duplicates of evidence (Forensic images)Ability to author cyber investigative reports documenting forensic findingsSkilled in identifying different classes of attacks and attack stagesProficiency with proper evidence handling procedures and chain of custody protocolsProficiency with analysis and characterization of cyber-attacksAction oriented and have a proactive approach to problem solvingAbility to manage multiple priorities and work effectively in a fast paced, high volume, results driven environmentAbility to investigate complex scenarios and solve problemsUnderstanding of System and Application security threats and vulnerabilities advanced requiredUnderstanding of proactive analysis of systems and networks, to include creating trust levels of critical resources advanced requiredProficiency with common operating systems (e.g,Linux/Unix, Windows)advanced requiredExperience with several industry standard forensic and digital analysis tools advanced requiredKnowledge of web application, infrastructure, and internet security along with a general understanding of common operating systems, networking protocols, database, and application development intermediate requiredKnowledge of Information Security components, principles, practices, and procedures intermediate preferredQualificationsBachelor's degree required Information assurance, computer science, engineering or related technical field.Master's degree preferred Advanced technical degree (information assurance, computer science, engineering)Three (3) years or more related security systems administration with endpoint, network, application and host-based security solutions. requiredThree (3) years or more cybersecurity risk management and/or IT experience. requiredTwo (2) years or more Cloud computing (e.g., Amazon Web Services, Google Cloud Platform or Microsoft Azure) security configuration and management experience preferred. preferredUnderstanding of System and Application security threats and vulnerabilities. advanced requiredUnderstanding of proactive analysis of systems and networks, to include creating trust levels of critical resources. advanced requiredProficiency with common operating systems (e.g,Linux/Unix, Windows). advanced requiredExperience with several industry standard forensic and digital analysis tools. advanced requiredKnowledge of web application, infrastructure, and internet security along with a general understanding of common operating systems, networking protocols, database, and application development. intermediate requiredKnowledge of Information Security components, principles, practices, and procedures. intermediate preferredInformation Risk, Privacy, or Security Certification (CISSP, CCSK, CCSP, PCSM)Travel1-10%DOT RegulatedNoJob CategoryInformation SecurityOur Culture & Commitment:At Ryder, you’re trusted to make an impact—while enjoying room to grow and having a voice that’s heard. Our culture is built on respect, collaboration, and shared pride in doing great work rooted in innovation and safety. Your Voice. Your Success. The Future We Build Together.Compensation Information:The compensation offered to a candidate may be influenced by a variety of factors, including the candidate’s relevant experience; education, including relevant degrees or certifications; work location; market data/ranges; internal equity; internal salary ranges; etc. The position may also be eligible to receive an annual bonus, commission, and/or long-term incentive plan based on the level and/or type. Compensation ranges for the position are below:Pay Type:SalariedMinimum Pay Range:$80,000.00Maximum Pay Range:$90,000.00Benefits Information:For all Full-time positions only: Ryder offers comprehensive health and welfare benefits, to include medical, prescription, dental, vision, life insurance and disability insurance options, as well as paid time off for vacation, illness, bereavement, family and parental leave, and a tax-advantaged 401(k) retirement savings plan.Ryder is proud to be an Equal Opportunity Employer and Drug Free workplace.All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, among other things, or status as a qualified individual with disability.Important Note:Some positions require additional screening that may include employment and education verification; motor vehicle records check and a road test; and/or badging or background requirements of the customer to which you are assigned. Security Notice for Applicants:Ryder will only communicate with an applicant directly from a [@ryder.com] email address and will never conduct an interview online through a chat type forum, messaging app (such as WhatsApp or Telegram), or via an online questionnaire. During an interview, Ryder will never ask for any form of payment or banking details and will never solicit personal information outside of the formal submitted application through www.ryder.com/careers.Should you have any questions regarding the application process or to verify the legitimacy of an interview or Ryder representative, please contact Ryder at careers@ryder.com or 800-793-3754.Current Employees:If you are a current employee at Ryder, please click here to log in to Workday to apply using the internal application process.Job Seekers can review the Job Applicant Privacy Policy by clicking here.