Prin Analyst Cyber Security Ops - Digital Forensics

The rate of pay for this position will depend on the successful candidate’s work location and qualifications, including relevant education, work experience, skills, and competencies. Annual Rate: $117,700.00 - $196,200.00 for  Waltham, MA location

Benefit Overview: This position offers a comprehensive benefits package including medical, dental, and vision insurance, a 401(k) with company match, paid time off, parental leave and potential for performance-based bonuses depending on company and individual performance

PURPOSE AND SCOPE:  

Fresenius Medical Care’s Cyber Security Operations Center (CSOC) is seeking a highly experienced Principal Analyst The Principal Cyber Security Analyst specializing in Digital Forensics serves as the senior technical authority for forensic investigations across the enterprise. This role leads complex incident response cases, conducts advanced forensic analysis of endpoints, servers, cloud environments, and networks, and provides strategic insight to reduce organizational risk. The Principal Analyst acts as the highestlevel escalation point for investigative matters and mentors other analysts in evidence handling, methodology, and tooling. 

This is a U.S.-based remote position supporting Fresenius Medical Care’s global Cyber Security Operations Center. 

PRINCIPAL DUTIES AND RESPONSIBILITIES:  

• Lead enterpriselevel forensic investigations involving malware, insider threats, credential compromise, data exfiltration, fraud, and targeted attacks. 

• Act as technical commander during priority incidents, directing scoping, containment, eradication, and rootcause analysis in partnership with IR, IT, and Cloud teams. 

• Conduct rootcause, impact, and attribution analysis for major cyber events; drive corrective and preventive actions. 

• Lead postincident reviews and oversee closure of remediation tasks, translating findings into hardening and control improvements. 

• Develop and maintain forensic methodologies, chainofcustody procedures, and evidencehandling standards. 

• Serve as the primary liaison with Legal, Privacy, HR, and external law enforcement during escalated or sensitive investigations. 

• Correlate forensic artifacts with threatintelligence insights to identify adversaries, campaigns, and TTPs. 

• Establish and maintain forensicreadiness strategies, including tooling optimization, logging enhancements, and dataretention standards. 

• Develop lightweight tools and scripts (Python/PowerShell) for artifact parsing, timeline generation, triage capabilities, and cloudlog normalization. 

PHYSICAL DEMANDS AND WORKING CONDITIONS: 

• The physical demands and work environment character