Cybersecurity Forensics and Incident Response Analyst

About the role

Bosch Cyber Defense is seeking an experienced analyst to lead digital forensics and incident response activities for the global Bosch organization. You will investigate cyber incidents, analyze malicious activity, and help prevent future attacks.

Key responsibilities

• Lead and support full‑lifecycle incident response and digital forensics, from triage to post‑incident reporting.
• Perform live‑system, offline and remote investigations, collecting and analyzing memory, disk, endpoint and network evidence.
• Analyze attack techniques, determine root cause, business impact and remediation actions.
• Coordinate response across technical and business stakeholders, providing clear updates and executive summaries.
• Collaborate with SOC, Threat Intelligence and other teams to improve detection, monitoring and response capabilities.
• Use and enhance SIEM, SOAR, EDR, packet analysis and forensic toolsets, recommending process improvements.

Required profile

• Bachelor’s degree in Computer Science, Electrical Engineering or related field.
• Minimum 3 years hands‑on experience in incident response or digital forensics.
• Strong proficiency in Windows environments and Active Directory security controls.
• Experience with malware analysis, both static and dynamic techniques.
• Ability to work under pressure, communicate findings to global stakeholders and participate in an on‑call rotation.

Required skills

• Python, Bash or PowerShell scripting.
• Windows forensics, Event Log and Registry analysis.
• Forensic tools: EnCase, FTK, SIFT, X‑Ways, Volatility, Sleuth Kit/Autopsy.
• Security platforms: SIEM, SOAR, EDR, packet analysis tools.
• Use of AI‑supported security capabilities for triage and threat hunting.
• Familiarity with MITRE ATT&CK framework and IOC search tools.