Lead Cyber Forensics Investigator

Our Company has one exciting mission: To entertain the human race and provide an unforgettable escape. Delivering excellence for our guests, and contributing to building and sustaining our communities, requires collaboration from diverse teams of world-class talent. Our iconic MGM Resorts brands offer a wide variety of exciting career opportunities, each with access to unlimited growth.

Primary Purpose

The Lead Cyber Forensics Investigator serves as the company's principal cyber forensics investigator working collaboratively with Legal, Corporate Security Investigators, IT Security, Internal Investigations, Fraud Control, and other stakeholders as needed to investigate and collect evidence in cases requiring specialized cyber expertise in:

Cyber Forensics Investigation

• Lead and conduct comprehensive digital investigations into cyber incidents, including data breaches, malware infections,
• network intrusions, and insider threats.
• Lead investigations into insider threats, including unauthorized access, data exfiltration, and sabotage, utilizing digital forensic
• techniques and behavioral analysis.
• Conduct intelligence gathering and prepare reports of forensic findings for employee or customer fraud investigations for HR,
• Legal, Fraud, and other relevant departments.
• Utilize advanced forensic tools and techniques to collect, preserve, analyze, and present digital evidence in support of
• investigations and legal requests.
• Perform forensic analysis on various digital devices and platforms, including computers, servers, mobile devices, and cloud
• environments.
• Document findings, write detailed forensic reports, and present findings to internal stakeholders and external clients as
• necessary.
• Implement monitoring and detection mechanisms to proactively identify and mitigate insider threats within the organization,
• including maintaining the Company’s data loss prevention program.
  
  

Incident Response

• Serve as a key member of the incident response team, providing expertise and leadership during cybersecurity incidents.
• Develop and maintain incident response plans, procedures, and playbooks to ensure effective response to cyber threats.
• Coordinate with cross-functional teams to contain and remediate incidents in a timely manner, minimizing impact on business
• operations.
• Conduct post-incident reviews and analysis to identify lessons learned and improve incident response processes.
  
  

Team Leadership

• Mentor and coach junior members of the cyber forensics and incident response team, fostering a culture of continuous learning
• and professional development.
• Provide guidance and support to team members during complex investigations and high-pressure incident response scenarios.
• Collaborate with other teams within the organization to enhance overall cybersecurity posture and readiness.
  
  

Minimum Requirements

• Bachelor's Degree or Equivalent experience
• 7 to 8 years of prior relevant experience
  
  

Preferred

• Previous professional experience as a witness in court proceedings
• Experience with cyber forensic tools for the collection, imaging, and analysis of hard drive and other digital storage media with related professional certifications
• Experience with mobile device forensics with related professional certifications
• Previous experience working in industry leading private sector organization