Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 206 days ago

Incident Response Engineer

american-cyber7 open roles

Where
United States
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIncident Response Engineeramerican-cyber · United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on american-cyber's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 206 days ago

The posting

About American Cyber

American Cyber partners with organizations to strengthen their security posture through modern cybersecurity solutions and services. We help our clients reduce risk, improve operational resilience, and enable secure, scalable growth. Our mission is to build resilient and compliant cybersecurity programs for our customers. ## Role Summary

American Cyber is seeking a detail-oriented Incident Response Engineer / Digital Forensics Analyst (Independent Contractor – 1099) to support cybersecurity investigations and incident response efforts. In this contract role, you will conduct forensic analysis, preserve digital evidence, and deliver clear, defensible findings that support security, legal, and compliance needs. You will work closely with incident response, SOC, and threat intelligence stakeholders to investigate incidents, identify root causes, and improve investigative readiness. ## Location

  • Remote (U.S.-based preferred)
  • United States

What You’ll Do

  • Conduct forensic analysis of digital evidence across endpoints, servers, network traffic, mobile devices, and cloud environments
  • Collect, preserve, and document evidence using industry best practices and legal standards, maintaining proper chain of custody
  • Support incident response by performing root cause analysis, identifying Indicators of Compromise (IOCs), and mapping adversary TTPs
  • Analyze logs, malware samples, memory artifacts, and network data to reconstruct timelines and attacker activity
  • Produce clear, detailed, and defensible forensic reports for technical, executive, and legal audiences
  • Provide expert support for internal investigations and litigation readiness; participate in testimony or proceedings when required
  • Collaborate with SOC, threat intelligence, and vulnerability management teams to strengthen detection, response, and prevention capabilities
  • Stay current on emerging threats, forensic methodologies, and tooling; recommend improvements to investigative workflows
  • Contribute to the development and continuous improvement of forensic processes, procedures, documentation, and incident response playbooks
  • Support security awareness and readiness initiatives by translating lessons learned into actionable guidance

Required Qualifications

  • Bachelor’s degree in Computer Science, Information Security, Digital Forensics, or a related field (or equivalent practical experience)
  • 2–5 years of experience in digital forensics, incident response, or cybersecurity investigations
  • Strong understanding of Windows, Linux, and macOS operating systems; file systems; and common network protocols
  • Hands-on experience with forensic tools such as EnCase, FTK, X-Ways, Cellebrite, Magnet AXIOM, Volatility, or similar platforms
  • Familiarity with SIEM platforms, intrusion detection systems, and endpoint detection and response (EDR) solutions
  • Working knowledge of evidence handling procedures, chain of custody requirements, and relevant legal/compliance considerations
  • Strong analytical and problem-solving skills with high attention to detail
  • Excellent written and verbal communication skills, including the ability to present findings to diverse audiences

Preferred Qualifications

  • Industry certifications such as GCFA, GCFE, CHFI, EnCE, CFCE, or CCE
  • Experience supporting litigation, law enforcement investigations, or regulatory compliance matters
  • Familiarity with scripting/automation (Python, PowerShell, Bash) to streamline forensic tasks
  • Experience with cloud and SaaS investigations (AWS, Azure, Google Cloud, and common SaaS platforms)
  • Knowledge of the MITRE ATT&CK framework and common threat actor tactics and techniques

Engagement Terms (1099 Contractor)

  • This role is structured as an independent contractor (1099) engagement and does not constitute an employment relationship
  • You retain discretion over the manner and means of performing services, consistent with agreed deliverables, timelines, and performance expectations
  • Compensation structure (hourly and/or project-based) will be defined in a separate agreement
  • Contractor is responsible for applicable taxes, insurance, and business expenses unless otherwise specified

Performance Expectations

  • Timely, accurate forensic analysis that supports incident response and investigative objectives
  • Proper handling, documentation, and preservation of evidence in accordance with legal standards and chain of custody requirements
  • Delivery of clear, defensible reporting suitable for technical, executive, and legal stakeholders
  • Effective collaboration with internal security and response teams in a distributed environment
  • Continuous improvement of forensic processes, investigative readiness, and incident response capabilities
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against american-cyber's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on american-cyber's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    american-cyber's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.