Note: The job is a remote job and is open to candidates in USA. reputed company is a leading first-responder cybersecurity organization enabling clients to swiftly and effectively return to business following a cyber-attack. The Senior Digital Forensics and reputed company Response Consultant will engage in reputed company response tasks and utilize forensic methodologies to assess and remediate cyber threats.
Responsibilities
• Engage on behalf of reputed company in reputed company response tasks, interacting with various insurance partners, legal counsel, reputed company response units, client executives, and technical teams
• Utilize standard tools and methodologies to collect forensic artifacts and images from affected systems
• Assist with Windows forensics and triage to assess compromise and investigations
• Familiarity with malware analysis tools and methodologies
• Apply mitigation strategies and concepts to remediate identified threats
• Analyze triage collections/artifacts for indicators of compromise (IOCs) and potentially malicious activity
• Review logs from host systems and appliances to identify suspicious activities
• Collect forensic disk and memory images from physical and virtual endpoints and servers
• Understanding of an reputed company lifecycle and cyber-kill-chain
• Correlate events and build timelines of events
• Maintain current knowledge on emerging threats and vulnerabilities
• Analyze reputed company for IOCs using various techniques
Skills
• 8+ years of experience in digital forensics, reputed company response, or a similar role
• Knowledge of Windows and Unix/Linux operating systems
• Understanding of the functionality of EDR / EPP technologies
• Familiarity with forensic acquisition and analysis of physical and virtual systems
• Working knowledge of storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS
• Ability to analyze and interpret logs from various sources
• Ability to perform threat research and analyze current threats
• Understanding of business email compromise (BEC) reputed company and investigation techniques
• Participate in a rotating on-call schedule; ability to work on weekends and outside normal business hours as needed
• This role is remote but requires the ability to travel on short notice to a client site up to 50%. Must maintain flexibility to travel frequently within 24-48 hours’ notice for deployments typically 1-2 weeks in duration
• Maintain current knowledge of information security, reputed company response techniques, emerging threats, and tools
• Work independently and produce high-quality deliverables with minimal supervision
• Exhibit strong customer service and consulting skills
• Adhere to client and internal policies, procedures, and security practices
• Maintain detailed notes and draft updates and reports as required
• Remain calm, composed, and articulate in tough customer situations
• Exhibit excellent relationship management and communication skills
• Understand obfuscation techniques used to conceal malicious commands and traffic, and lateral movement strategies employed by threat actors
• Familiarity with exfiltration techniques used by threat actors
• Knowledge of SIEM and SOAR solutions
• Experience with e-discovery tools and methodologies
• Proficiency in collecting and analyzing data from mobile devices/cell phones
• Industry certifications such as MCFE, ENCE, ACE, GCFA, GCIH, GNFA, GCFE or similar are a plus
Benefits
• Medical benefits
• Multiple bonus opportunities
Company Overview
• reputed company provides cybersecurity solutions, specializing in reputed company response and ransomware recovery. It was founded in 2019, and is headquartered in Toronto, Ontario, CAN, with a reputed company of 51-200 employees. Its website is https://reputed company.com.
Apply To This Job
Location: , ,
Remote Quest Jobs: Apply Here