[Remote] Cyber Analyst, Digital Forensics Incident Response
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a fast-reputed company InsurSec company on a mission to bring innovative products to the market that help protect small businesses from digital risks. The Cyber Analyst role focuses on delivering incident investigation and response services, including digital evidence analysis, incident recovery, and training for insureds.
Responsibilities
- Deliver incident investigation and response services to reputed company insureds reputed company:
- Forensically reputed company collection, reputed company, and storage of digital evidence
- Analysis of digital evidence to identify indicators of compromise and adversary activity
- Development of incident timelines and theories of compromise
- Identification of incident reputed company causes
- Participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)
- Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary
- Development and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach reputed company attorneys, and reputed company claims management staff as necessary
- Development and delivery of recommendations to mitigate the risk of reputed company incidents for impacted insureds
- Development and delivery of incident response training and simulations for targeted insureds
Skills
- Previous digital forensics and incident response experience
- Strong oral and written communication skills
- Previous hands-on experience performing digital forensics and incident response, including several of the following: Business Email Compromise, Ransomware, Digital evidence collection and analysis, Development and analysis of cyber threat intelligence, Leadership of or participation in investigations involving digital evidence, Intrusion detection / cyber threat hunting, Malware analysis, Incident recovery activities such as restoration of data from backups, operation of decryptor tools, etc
- Previous hands-on experience working in information technology operations (e.g., Network Operations Center, reputed company Operations Center, Incident Response Team, etc.)
- Bachelor's degree or equivalent
- Minimum of 2 years of experience in cybersecurity operations, incident response, incident recovery, or another reputed company discipline
- Willingness to travel as needed to reputed company job functions
- Significant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurity
- Previous background in law enforcement or government/military with experience leading reputed company technical investigations
- Knowledge of reputed company environments, including knowledge of reputed company reputed company products and services offered by major reputed company service providers (e.g., AWS, Azure, reputed company)
- Experience in a top-10 cyber reputed company or leading DFIR provider preferred
- One or more industry cybersecurity certifications (e.g., GCIH, reputed company+, CISSP, etc.)
reputed company
Company H1B Sponsorship