• Incident Management: Lead the incident response lifecycle (preparation, identification, containment, eradication, and recovery). • Forensic Analysis: Perform digital forensics on hosts (Windows/Linux/iOS/Android), memory, networks, and cloud environments to identify the root cause of compromises. • Advanced Monitoring: Work together with the SOC/Support team to triage high-complexity alerts in XDR/SIEM and NDR tools. • Threat Hunting: Conduct proactive searches for threats that may have bypassed existing security controls. • Documentation and Reporting: Produce detailed technical reports and forensic findings to support executive decision-making and regulatory compliance (Bacen/LGPD). • Continuous Improvement: Recommend adjustments to detection rules and security policies based on the tactics (TTPs) observed during investigations.

• Monitor and analyze security events utilizing Splunk Enterprise Security (ES). • Build, maintain, and tune Splunk searches, correlation rules, alerts, and dashboards. • Conduct incident response activities from detection through containment, eradication, recovery, and closure. • Investigate endpoint security incidents utilizing Microsoft Defender for Endpoint. • Perform endpoint policy management and incident investigations. • Assess AWS cloud security telemetry utilizing GuardDuty, Security Hub, and related cloud security services. • Identify threats, vulnerabilities, suspicious activity, and cloud misconfigurations. • Execute alert triage, incident scoping, and escalation activities according to established playbooks. • Recommend updates and improvements to operational procedures and incident response playbooks. • Support threat hunting activities and detection engineering initiatives aligned to MITRE ATT&CK methodologies. • Perform phishing investigations, alert enrichment, and forensic review activities. • Conduct root cause analysis and document corrective actions following security incidents. • Track incidents and operational tasks utilizing case management systems. • Participate in tabletop exercises and operational readiness activities. • Collaborate with Security Operations teams, Incident Response personnel, and federal stakeholders. • Prepare reports and communicate findings to technical and non-technical audiences. • Perform other job-related duties as assigned.

Role Description The Senior Forensic Examiner is responsible for performing advanced forensic scoping, forensic consultation, forensic collection, forensic analysis, forensic reporting, and expert testimony. They are responsible for determining the most defensible method of collection and troubleshooting any data issues that may arise. They are also responsible for the more intricate and new data source collections and analysis. What You'll Do - Forensic Collections and Investigations: - Conducts forensic collections of digital evidence using best practices and approved software and hardware. - Acquires electronic data from cloud sources, computers, mobile devices, and other digital media in a forensically sound manner. - Consults with customers to conduct forensic collections, perform exports and reporting, and conduct investigations. - Forensic Reporting: - Creates summary reports, forensic artifact reports, and formal forensic expert reports when requested by the client. - Maintains contemporaneous forensic examination notes. - Expert Testimony (Written/Oral): - Provides expert testimony regarding investigative forensic findings. - Technical Consultancy and Support: - Serves as a technical consultant on data management and digital forensic methodology and concepts. - Provides technical guidance and assistance to staff involved in the investigation and litigation process to prevent evidence spoliation. - Quality Assurance and Legal Support: - Ensures all hardware and software are verified and validated according to established guidelines and the Federal Rules of Evidence. - Drafts affidavits, declarations, expert reports, and provides oral testimony in defense of forensic findings or processes. Qualifications - 9+ years of progressive technical experience demonstrating relevant skills in digital forensic collections and investigations. - Hands-on experience with digital forensic tools such as MetaSpike Forensic Email Collector (FEC), X-Ways, AccessData Forensic ToolKit (FTK), OpenText EnCase, Cellebrite UFED/PA, Cellebrite Digital Collector, Cellebrite Inspector, Magnet Forensics Axiom Cyber, Paraben E3, Fookes Aid4Mail, and GetData Forensic Explorer (FEX). - Experience with the chain of custody and evidence handling best practices. - Strong understanding and knowledge of disk structures, file systems, and forensic artifacts for modern operating systems for Windows and Apple computers. - Strong understanding, knowledge and experience of Microsoft Purview and Google Workspace and their metadata. - Experience applying forensic investigative and litigation support principles methodologies. - Excellent documentation and communication skills with technical report writing experience. - Ability to multitask and manage multiple projects and competing priorities simultaneously. - Capability to work independently and within a team environment. Requirements - 5+ years experience within the private sector of e-Discovery, performing collections of email, cloud sources, mobile devices, workstations, servers, and structured data. - 5+ years experience performing forensic investigations and analysis. - Experience testifying in civil or criminal courts in defense of forensic investigative findings. Authorization to Work in the U.S. - Candidates must be legally authorized to work in the United States without sponsorship now or in the future. - DISCO is not currently sponsoring visas, including, but not limited to, H-1B, TN, or EAD, and we are not accepting visa transfers. Benefits - Open, inclusive, and fun environment. - Benefits, including medical, dental and vision insurance, as well as 401(k). - Competitive salary plus RSUs. - Flexible PTO. - Opportunity to be a part of a company that is revolutionizing the legal industry. - Growth opportunities throughout the company.

Role Description We are seeking a Senior Cybersecurity Analyst – GRC (Governance, Risk, and Compliance) to support and improve our security compliance and risk management program. This individual will help manage third-party audits, perform risk assessments, ensure ongoing compliance with security frameworks, and support business teams with customer and vendor assurance. You’ll work closely with security, engineering, legal, and customer teams to ensure Eltropy’s security posture remains strong, transparent, and audit-ready. - Assist in the preparation and execution of third-party audits and assessments, including SOC 2, PCI-DSS, NIST CSF, and ISO 27001. - Support the development and maintenance of Eltropy’s GRC program, ensuring alignment with business and regulatory requirements through well-defined policies, controls, and risk processes. - Respond to customer security questionnaires and due diligence requests. - Conduct and manage vendor security assessments, maintain risk tracking, and ensure third-party compliance. - Perform risk assessments across systems, tools, and business processes; manage mitigation plans and maintain an exceptions register. - Contribute to access governance, including quarterly access reviews, enforcement of least privilege, and identity and access documentation. - Draft, review, and update security policies, standards, and procedures to reflect current risk posture and best practices. - Lead or support security awareness programs to promote a risk-conscious culture among staff and end users. - Contribute to the development and testing of incident response and disaster recovery plans. - Monitor and analyze cybersecurity threats, trends, and technologies, and recommend enhancements to Eltropy’s security posture. - Help ensure the security of IT infrastructure by supporting the implementation and maintenance of measures against unauthorized access, cyber threats, and vulnerabilities. - Track and report on compliance status, audit readiness, and risk trends to key stakeholders. Qualifications - 3–5 years of experience in cybersecurity or IT risk/compliance, with a focus on GRC. - Familiarity with major frameworks like SOC 2, PCI-DSS, ISO/IEC 27001, and NIST CSF. - Experience supporting third-party audits or certifications. - Knowledge of risk management processes and frameworks. - Ability to respond to security due diligence questionnaires and document technical and organizational controls. - Understanding of access governance and identity lifecycle best practices. - Excellent communication, documentation, and stakeholder coordination skills. - Comfort with tools like Vanta, Drata, or similar GRC platforms. Preferred Skills - Experience in a SaaS, FinTech, or regulated technology environment. - Familiarity with cloud environments such as GCP, AWS, or Azure. - Understanding of security operations, incident response, or DevSecOps concepts. Certifications (Preferred But Not Mandatory) - CISA – Certified Information Systems Auditor - ISO 27001 Lead Auditor / Implementer - PCI ISA – Internal Security Assessor Company Description Eltropy is a rocket ship FinTech on a mission to disrupt the way people access financial services. Eltropy enables financial institutions to digitally engage in a secure and compliant way. Using our AI enabled digital conversations platform, community financial institutions can improve operations, engagement and productivity. - CFIs (Community Banks and Credit Unions) use Eltropy to communicate with consumers via Text, Video, Secure Chat, co-browsing, screen sharing and chatbot technology — all integrated in a single platform bolstered by AI, skill-based routing and other contact center capabilities. - Customers are our North Star - No Fear - Tell the truth - Team of Owners Eltropy is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.