Incident Response Consultant (Remote)

Overview

Serve as a technical consultant on incident response engagements, investigating intrusions and protecting organizations against advanced attackers.

What you'll do

• Serve as part of the technical team on incident response engagements.
• Develop and use new methods to hunt for bad actors across large sets of data.
• Work under the direction of project leadership and outside counsel to conduct intrusion investigations.
• Perform host and/or network-based forensics across Windows, Mac, and Linux platforms.
• Support the production of high-quality written and verbal reports, presentations, recommendations, and findings to key stakeholders including customer management, regulators, and legal counsel.

What you'll need

• Knowledge of or experience in one or more of the following areas: Incident Response, Computer Forensic Analysis, Network Forensic Analysis, Reverse Engineering, Incident Remediation, Network Operations and Architecture/Engineering, Cloud Incident Response, or Communications.
• Experience conducting or managing incident response investigations for organizations, investigating targeted threats such as the Nation-State, E-Crime, and Hacktivists.
• Background using forensic analysis tools in incident response investigations to determine the extent and scope of compromise.
• Strong knowledge of network protocols, network analysis tools like Bro/Zeek or Suricata, and ability to perform analysis of associated network logs.
• Ability to understand the capabilities of static and dynamic malware analysis.
• Strong understanding of targeted attacks and able to support creating customized tactical and strategic remediation plans for compromised organizations.
• Understanding of secure network architecture and strong background in performing network operations.
• Knowledge of AWS, Azure, or GCP incident response methodologies.
• Strong ability to communicate executive and/or detailed level findings to clients, and to effectively communicate tasks, guidance, and methodology with internal teams.
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
• Education: a Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Math, Information Security, Information Assurance, Information Security Management, Cybersecurity, Cybersecurity Policy, or a related discipline is typical; applicants without a degree but with relevant work experience and/or training will be considered, and should apply their previous experience to the qualification areas above.

Nice to have

• Capable of completing technical tasks with limited supervision.
• Desire to grow and expand both technical and soft skills.
• Ability to foster a positive work environment and attitude.

Details

• Remote position based in the USA.
• May require periodic alcohol and/or drug testing during the course of employment.
• Base salary range for U.S. candidates is $95,000 - $140,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package.