Digital Forensic and Incident Response Analyst

Job Description Summary Digital Forensic and Incident Response (DFIR) Analyst will be a member of our Cyber Fusion Center Team and support our Incident Response function. This position will provide support to security operations through incident triage, event analysis, documentation updates, incident response and other SOC duties assigned. This position supports a 24x7x365 support staff and candidates should be open to working a rotating schedule with non-core hours. This position will be a hybrid working environment with a mix of remote and onsite work. Key Responsibilities Responds to IT security incidents according to the IT security incident response policy. Provides guidance to first level responders for handling information security incidents. Actively manage, drives, and provide recommendations on third party remediation efforts. Provides investigation findings for cyber events (intrusions, malware, DDoS, unauthorized access, insider attacks and loss of proprietary information) to the relevant cyber security assurance functions to help improve information security posture. Respond to high-priority requests for information/intelligence from senior stakeholders. Validates and maintains incident response plans and processes to address potential threats. Build strong relationships with business and technology stakeholders. Effectively represent the team and communicate with all levels of organization including senior management and business stakeholders. Identify and develop workflow automation to lower response time and eliminate lengthy procedures during incident investigation. Perform additional analysis of escalations from Incident Response Analysts and conduct case review. Develop specific expertise, to discern patterns of complex threat actor behavior, and to communicate an understanding of current and developing cyber threats. Position Qualifications Education Minimum Requirement High School Diploma required. Equivalent experience and/or education is accepted in place. Required Experience and Skills 3-5 years of experience Incident Response or Cybersecurity (Education and Bootcamps included) Intimate knowledge of the Cyber Kill Chain, MITRE ATT&CK Framework, or other relevant network defense and intelligence frameworks. Advanced knowledge of security technologies, such as, SIEM, EDR Tools, Host and Network Security Tools and Vulnerability Management tools. Excellent written and oral communication skills. Demonstrated ability to work independently and as part of global teams in a fast-paced global environment. Preferred Experience and Skills IT Security Certifications (GCIH, CySA+, SANS) Familiarity with Agile methodology. Working knowledge of Software Development Lifecycle Practices. Experience with Python, networking, IDS/IPS. Required Skills Adaptability, Analytical Thinking, Cyber Threat Hunting, Cyber Threat Intelligence, Data Loss Prevention (DLP), Detail-Oriented, Digital Forensics, Incident Response Management, Insider Threat Mitigation, Log Analysis, Malware Analysis, Security Information and Event Management (SIEM), Security Monitoring, Security Operations, SLA Management, Team Collaboration, Vulnerability Assessments, Vulnerability Management, Written Communication Preferred Skills Current Employees apply HERE ( Current Contingent Workers apply HERE ( US and Puerto Rico Residents Only Our company is committed to inclusion, ensuring that candidates can engage in a hiring process that exhibits their true capabilities. Please click here ( if you need an accommodation during the application or hiring process. Equal Employment Opportunity Statement As an Equal Employment Opportunity Employer, we provide equal opportunities to all employees and applicants for employment and prohibit discrimination on the basis of race, color, age, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, or other applicable legally protected characteristics. As a federal contractor, we comply with all affirmative action requirements for protected veterans and individuals with disabilities. For more information about personal rights under the U.S. Equal Opportunity Employment laws, visit: EEOC GINA Supplement We are proud to be a company that embraces the value of bringing together, talented, and committed people with diverse experiences, perspectives, skills and backgrounds. The fastest way to breakthrough innovation is when people with diverse ideas, broad experiences, backgrounds, and skills come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another’s thinking and approach problems collectively. Learn more about your rights, including under California, Colorado and other US State Acts ( Compensation The salary range for this role is $79,200.00 - $124,700.00 This is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting. An employee’s position within the salary range will be based on several factors including, but not limited to relevant education, qualifications, certifications, experience, skills, geographic location, government requirements, and business or organizational needs. The successful candidate will be eligible for annual bonus and long-term incentive, if applicable. Benefits We offer a comprehensive package of benefits. Available benefits include medical, dental, vision healthcare and other insurance benefits (for employee and family), retirement benefits, including 401(k), paid holidays, vacation, and compassionate and sick days. More information about benefits is available at Application Information You can apply for this role through (or via the Workday Jobs Hub if you are a current employee). The application deadline for this position is stated on this posting. Location Specifics San Francisco Residents Only: We will consider qualified applicants with arrest and conviction records for employment in compliance with the San Francisco Fair Chance Ordinance. Los Angeles Residents Only: We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance. Search Firm Representatives Please Read Carefully Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails. Employee Status Regular Relocation No relocation VISA Sponsorship No Travel Requirements No Travel Required Flexible Work Arrangements Remote Shift Not Indicated Valid Driving License No Hazardous Material(s) NA Job Posting End Date 07/17/2026 Requisition ID

R405530