Dear Hiring Manager,
I am applying for the Junior DFIR Analyst role. During my internship in a managed security team I collected evidence and wrote timelines, which is the core of the work you describe.
I collected evidence from eight Windows endpoints with Velociraptor after confirmed alerts, and I wrote ten incident timelines that a Tier 2 analyst reviewed and signed off. Outside work I published fifteen DFIR write-ups, and in three memory images I used Volatility to find an injected process and trace it to its parent. I documented our evidence handling steps so that every handover shows who held the data and when.
I hold BTL1 and CompTIA CySA+. I am looking for a team where I can learn from experienced investigators, and I can share my write-ups and my timeline template before an interview.
Sincerely,
Casey Example