As an Incident Response Specialist , you will respond to security incidents by gathering digital evidence and developing and presenting forensic findings. Your role will involve performing data analytics to identify and confirm cybersecurity threats, utilizing a broad knowledge of technologies to analyze evidence for its relevance and forensic significance. You will conduct network forensic investigations, including packet analysis, as well as malware analysis to determine capabilities and develop indicators of compromise. Additionally, you will participate in proof of concepts for new cybersecurity tools, prepare formal written reports suitable for legal proceedings, and support incident and investigation post-mortem briefings, analysis, and reporting.

This role is hybrid, which means you will work some days at our corporate office in Richfield, Minnesota, and some days virtually from home or another non-Best Buy location.  The specific work arrangements vary by role and team. The recruiter or hiring manager will provide more details during the hiring process
What you’ll do Play a pivotal role in detecting and disrupting threat actors through advanced data analysisApply threat intelligence methods and technologiesEnhance the company’s controls and methodologiesStrengthen detection and response capabilities Basic qualifications5 or more years of experience in Digital Forensic Incident Response in a large-scale enterprise environment5 or more years of experience performing forensic analysis on volatile host data5 or more years analyzing network logs and traffic Experience communicating with non-technical and technical stakeholders.Strong case management and documentation skills.Strong analytical and problem-solving skills under pressure.Preferred qualificationsBachelor's degree in Cybersecurity or related discipline.Relevant cybersecurity certifications (GIAC, EC-Council, Offensive Security, etc.).Previous experience working in cloud environments in a Cybersecurity capacity.Experience authoring detection signatures.2 or more years of recent experience conducting dynamic and static malware analysis.Understanding and utilization of KQL.Understanding of regular expression and at least one common scripting language (PERL, Python, PowerShell, ETC).What’s in it for you
We’re committed to helping our people thrive at work and at home. We offer generous benefits that address your total well-being and provide support as you need it, especially key moments in your life.
Our benefits include:Competitive payGenerous employee discountPhysical and mental well-being support About us
As part of the Best Buy team, you’ll help us fulfill our purpose to enrich lives through technology. We bring that to life every day by humanizing and personalizing tech solutions for every stage of life — in our stores, online and in customers’ homes.
Our culture is built on deeply supporting and valuing our amazing employees who make it all possible. We’re committed to being a great place to work, where you can unlock unique career possibilities. Above all, we aim to provide a place where you can bring your full, authentic self to work now and into the future. Tomorrow works here.™
Best Buy is an equal opportunity employer