Senior CTI & DFIR Analyst
Company The Lubrizol Corporation
Location Wickliffe, OH
Preferred GIAC Certifications GCFA, GCTI, GCFR
Travel 10%
Salary $115-125k USD
URL https://jobs.lubrizol.com/job-invite/100411/
Contact Name Lubrizol Recruiter
Contact Email caroline.bowen/at/lubrizol.com
Expires 2026-03-19

Job Description

Location: Wickliffe, OH or Deer Park, TX

Travel: 10% domestic

Job Type: Full time, onsite four days with one remote optional day.

How You’ll Make an Impact:
As a Senior Cyber Threat Intelligence & Digital Forensic Incident Response Analyst, you'll be at the forefront of our innovation, driving cutting-edge initiatives in threat intelligence and digital forensics to combat emerging cyber risks. You'll collaborate with a diverse group of passionate individuals to deliver sustainable solutions to advance mobility, improve wellbeing, and enhance modern life. In this role, you will focus on the following:


Cyber Threat Intelligence (~60%):
-Collect, analyze, and disseminate actionable intelligence relevant to the chemical sector and OT systems.
-Monitor threat actors, TTPs, and campaigns using frameworks like MITRE ATT&CK and Diamond Model.
-Produce strategic, operational, and tactical intelligence reports for key stakeholders.
-Collaborate with SOC, IR, and vulnerability teams to enhance detection and response.
-Maintain and integrate threat intelligence platforms (e.g., Recorded Future) into XDR workflows.

Incident Response (~30%):
-Lead/assist in investigations of cybersecurity incidents across on-prem, cloud, and ICS environments.
-Coordinate containment, eradication, and recovery efforts aligned with NIST SP 800-61.
-Deliver technical and executive-level incident reports, including regulator-ready documentation.
-Conduct adversary emulation and red/purple team exercises.

Digital Forensics (~10%):
-Acquire, preserve, and analyze digital evidence using industry-standard tools.
-Maintain chain of custody documentation per ISO/IEC 27037 and NIST SP 800-61.
-Contribute to forensic automation and workflow improvements.

Required Qualifications that Enable Your Success:
-Bachelor’s degree in Computer Science, Digital Forensics, or a related field.
-Relevant certification such as GCFA, GCTI, GCFR, CISSP, CFCE, MITRE ATT&CK Defender (MAD), or equivalent (preferred)
-Minimum of 5 years of proven experience in cyber forensics, incident response, or digital investigations.
-Minimum of 3 years of experience in Cyber Threat Intelligence.
-Strong knowledge of forensic methodologies, tools, and techniques.
-Experience using forensic and vulnerability/attack simulation tools.
-Experience with threat intelligence platforms (TIPs), SIEMs, and SOAR tools.
-Master’s degree in a related field (considered a plus)
-Experience in manufacturing or chemical sectors (considered a plus)

Your Work Environment:
At Lubrizol, we’re committed to providing a safe, inclusive, and empowering environment where you can do your best work—whether in a lab, on the production floor, or in a hybrid office setting. Depending on your role, your work environment may include:
-Use of computers and digital tools in an office environment
-Adherence to rigorous safety protocols and ergonomic standards
-We continuously invest in our facilities and technologies to ensure they support your well-being, productivity, and growth. If you require reasonable accommodation, we are committed to working with you to ensure an inclusive and accessible experience.

Benefits that Empower You:
-Competitive salary with performance-based bonus plans
-401(k) match + Age-Weighted Defined Contribution
-Comprehensive medical, dental & vision coverage
-Health Savings Account (HSA)
-Paid holidays, vacation, and parental leave
-Inclusive culture and vibrant community engagement
Learn more at benefits.lubrizol.com!