IBM CISO - Cybersecurity Forensic Analyst

IBM's Cyber Security Incident Response Team (CSIRT) is seeking a high-performing Incident Response Forensic Analyst to support the investigation and response to cybersecurity incidents across the Americas region.

In this role, you will work at the intersection of incident response, digital forensics, and threat analysis, partnering closely with responders, threat detection teams, and leadership to investigate security events, preserve forensic evidence, and drive timely containment and remediation.

This is a hands-on analytical role requiring the ability to translate complex technical findings into actionable insights, enabling both operational response and executive decision-making. The successful candidate will demonstrate strong technical depth, investigative rigor, and the ability to operate effectively in high-pressure environments.

Key Responsibilities:

• Conduct forensic investigations on endpoint, network, and cloud environments
• Collect, preserve, and analyze digital evidence in accordance with established standards
• Support incident response activities, including triage, containment, eradication, and recovery
• Correlate forensic evidence with threat intelligence and detection signals
• Ability to analyze disk images, logs, and recovered data
• Reconstruct attack timelines and identify root cause and impact
• Document findings and produce clear, defensible reports for technical and non-technical stakeholders
• Collaborate across CSIRT, SOC, Legal, and Compliance teams as needed
• Contribute to post-incident reviews and continuous improvement of response capabilities