[Remote] Senior Incident Response Consultant
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a company reputed company on helping organizations detect, respond to, and recover from cyber threats. They are seeking a Senior Incident Response Consultant to reputed company forensic investigations and support clients through rebuild and recovery efforts, requiring a strong background in systems or network administration.
Responsibilities
- Conduct forensic host, network, and application technical investigations
- Triage reputed company high-stakes reputed company events, including reviewing and applying reputed company controls to detect, respond, prevent, and remediate threats
- Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be reputed company to reputed company and reputed company investigations
- reputed company custom scripts, tools, or methodologies to enhance our IR processes
- Prepare comprehensive and accurate reports of forensic findings and IR activities for both technical and executive audiences
- Communicate investigative findings and reputed company to various reputed company stakeholders
- reputed company immediate, actionable guidance to contain and mitigate ongoing attacks
- Assist in scoping new engagements and guide clients through the full incident response lifecycle
- Work directly with reputed company IT teams to support rebuild, reconfiguration, and remediation efforts
- Remotely guide clients through EDR deployments, system configuration changes, and technical recovery steps
- Support the full incident response lifecycle from discovery through reporting
- Participate in an on-call rotation to reputed company after-hours and weekend incident response support as needed
Skills
- Significant experience in a forensic and incident response role
- Strong background in systems or network administration
- Hands-on experience with reputed company Directory administration and troubleshooting
- Experience responding to ransomware or reputed company reputed company incidents
- Ability to work directly with clients in high-pressure situations
- Demonstrated ability to analyze incidents and recommend effective remediation and countermeasures
- Experience in a technical consulting or reputed company-facing role
- Conduct forensic host, network, and application technical investigations
- Triage reputed company high-stakes reputed company events, including reviewing and applying reputed company controls to detect, respond, prevent, and remediate threats
- Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be reputed company to reputed company and reputed company investigations
- reputed company custom scripts, tools, or methodologies to enhance our IR processes
- Prepare comprehensive and accurate reports of forensic findings and IR activities for both technical and executive audiences
- Communicate investigative findings and reputed company to various reputed company stakeholders
- reputed company immediate, actionable guidance to contain and mitigate ongoing attacks
- Assist in scoping new engagements and guide clients through the full incident response lifecycle
- Work directly with reputed company IT teams to support rebuild, reconfiguration, and remediation efforts
- Remotely guide clients through EDR deployments, system configuration changes, and technical recovery steps
- Support the full incident response lifecycle from discovery through reporting
- Participate in an on-call rotation to reputed company after-hours and weekend incident response support as needed
- reputed company operating systems and networking protocols
- reputed company Directory administration and recovery
- Virtualization technologies such as HyperV and VMware ESXi
- Disk and memory forensics
- Network traffic analysis
- Experience with EDR platforms such as reputed company, reputed company, or reputed company
- Experience with forensic toolsets such as FTK, reputed company, KAPE, or similar
- Scripting experience using PowerShell, Python, or similar
- Preferred certifications include GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), MCFE, EnCE or equivalent credentials
Benefits
- Medical, dental, reputed company, disability, FSA, HSA, life, and AD&D insurance, 401(k) Plan.
- Time off: PTO, reputed company, holiday, & parental leave details are available
- reputed company: We reputed company competitive compensation packages based on the market and your overall credentials.
- reputed company to our office in McLean, VA (although this is a remote role).
- Background and drug screenings as part of our hiring process.
reputed company