Security Spec Lead - Digital Forensics Analyst

Job Posting End Date09-14-2026

Please note the job posting will close on the day before the posting end date.

Job Summary

The Digital Forensic Analyst investigates and examines digital assets. The position is aligned with AEP’s Cybersecurity Intelligence & Defense organization and Insider Threat team. It is a highly technical role and supports digital investigations utilizing endpoint images, security analytics, and user activity monitoring across a broad range of cybersecurity and IT tools. The analyst also supports programs and policies that reduce internal risk.

The analyst partners with Cyber Incident Responders, HR, Legal, Ethics, Physical Security, and other stakeholders to support data acquisition and analysis. The analyst will document findings, manage cases from initiation to resolution, and communicate technical conclusions in clear business language.

Job Description

What You'll Do

Essential Job Functions & Tasks

Conduct end-to-end investigations of internal and external matters.

Prepare findings reports for HR, Legal, Ethics, Physical Security, and other stakeholders

Develop and maintain Digital Forensics policies and procedures documentation

Support risk-reduction projects, including post-incident lessons learned

Serve as a technical SME for Insider Threat, DLP, and cyber investigations

Produce clear investigative and analytic reports for technical and executive audiences

Maintain tools and technologies pertaining to Digital Forensics collection and analysis

Required Qualifications and Skills

Ability to obtain and maintain a U.S. government security clearance

In-depth understanding of Windows, Linux/Unix, MacOS, Android and iOS operating systems and interconnected network devices

Understanding of mobile device forensics and evidence collection techniques

Experience with malware reverse engineering and analysis

Understanding of anomalous user activity monitoring and policy violation investigations

Ability to use internal and external log sources, forensic tools, and established investigative methods to determine incident source and scope

Work independently while maintaining strict confidentiality throughout investigations which sometimes involve high pressure situations or rapidly changing priorities

Communicate clearly, verbally and in writing, with strong analytical and critical-thinking skills

Handle sensitive and confidential material appropriately

Understanding of forensic capture and analysis methodologies and evidence chain of custody procedures

Preferred Qualifications

Bachelor's degree or equivalent experience in cybersecurity, digital forensics, computer science, or related field

Experience with standard forensic methods and leading collection and analysis tools

Deep experience conducting technical investigations or root cause analysis in complex environments

Experience identifying insider risk indicators through analytics tools

Understanding and experience with digital forensics in a cloud environment

Understanding of threat actor tactics, techniques, and procedures

Familiarity with electric utility operations, ICS/SCADA, or critical infrastructure protection frameworks such as NERC CIP

Working knowledge of programming languages and Splunk query development

Ability to apply AI to threat detection and analysis

Understanding and experience with security monitoring tools, SIEM platforms, and endpoint detection solutions

Ability to work and lead in cross-functional environments involving HR, Legal, Compliance, Privacy, and Security teams

Knowledge of cyber investigations and incident response processes

Experience with case management and evidence handling procedures

Experience with data classification, information protection, data loss prevention (DLP), and sensitive data monitoring technologies

Preferred Certifications and Courses

SANS Forensics Certifications (Ex. GASF, GCFA, GCFE, GREM, GNFA)

Computer Hacking Forensic Investigator (CHFI)

GIAC Certified Incident Handler (GCIH)

Vendor specific certification for industry leading forensics tools

What We're Looking For:

Education requirements are listed below:

Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical).

Work Experience requirement listed below:

7 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.

What You'll Get:

Base Salary from $116,255.00 - $151,132.50 /year. In addition to a competitive compensation, AEP offers a unique comprehensive benefits package that aims to support and enhance the overall well-being of our employees.

At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!

Compensation Data

Compensation Grade:

SP20-009

Compensation Range:

$116,255.00 - $151,132.50

The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

Hear about it first! Get job alerts by email. Log in to your Candidate Home Account today! If you don't have an account, you can create one.It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.

R18628