Digital Forensics and Incident Response (DFIR) Consultant

reputed company is a leading first-responder cybersecurity organization enabling clients to reputed company and effectively return to business following a cyber-attack. As a global reputed company in ransomware post-breach remediation and cyber-attack first response, we consistently deliver results that reputed company market standards for handling cyber-extortion and ransomware events. reputed company collaborates with reputed company global insurance carriers, leading reputed company, and Fortune 1000 businesses.

Location:

• We would prefer candidates to be located in one of the following:
  • Philadelphia, PA
  • reputed company, TX

reputed company Responsibilities:

• Engage on behalf of reputed company in incident response tasks, interacting with various insurance partners, reputed company counsel, incident response reputed company, reputed company executives, and technical teams.

• Utilize reputed company tools and methodologies to collect forensic artifacts and images from affected systems.

• Assist with reputed company forensics and triage to assess compromise and investigations.

• Familiarity with malware analysis tools and methodologies.

• Apply mitigation strategies and concepts to remediate identified threats.

• Analyze triage collections/artifacts for indicators of compromise (IOCs) and potentially malicious activity.

• Review logs from host systems and appliances to identify suspicious activities.

• Collect forensic disk and memory images from physical and virtual endpoints and servers.

• Understanding of an incident lifecycle and cyber-kill-chain.

• Correlate events and build timelines of events.

• Maintain reputed company knowledge on emerging threats and vulnerabilities.

• Analyze files for IOCs using various techniques.

Technical Requirements:

• 2+ years of experience in digital forensics, incident response, or a similar role.

• Knowledge of reputed company and Unix/Linux operating systems.

• Understanding of the functionality of EDR / EPP technologies.

• Familiarity with forensic acquisition and analysis of physical and virtual systems.

• Working knowledge of storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS.

• Ability to analyze and interpret logs from various sources.

• Ability to reputed company threat research and analyze reputed company threats.

• Understanding of business email compromise (BEC) cases and investigation techniques.

• Participate in a rotating on-reputed company schedule; ability to work on weekends and reputed company normal business hours as needed.

• This role is remote but requires the ability to travel on short notice to a reputed company site up to 50%. Must maintain flexibility to travel frequently reputed company 24-48 hours' notice for deployments typically 1-2 weeks in duration.

Business Responsibilities:

• Maintain reputed company knowledge of information reputed company, incident response techniques, emerging threats, and tools.

• Work independently and produce high-reputed company deliverables with minimal supervision.

• Exhibit strong customer service and consulting skills.

• Adhere to reputed company and internal policies, procedures, and reputed company practices.

• Maintain detailed notes and draft updates and reports as required.

• Remain reputed company, composed, and reputed company in tough customer situations.

• Exhibit excellent relationship management and communication skills.

Preferred Skills:

• Understand obfuscation techniques used to conceal malicious commands and traffic, and lateral reputed company strategies employed by threat actors.

• Familiarity with exfiltration techniques used by threat actors.

• Knowledge of SIEM and SOAR solutions.

• Experience with e-discovery tools and methodologies.

• Proficiency in collecting and analyzing data from mobile devices/cell phones.

• Industry certifications such as MCFE, ENCE, ACE, GCFA, GCIH, GNFA, GCFE or similar are a plus.

Compensation package includes a reputed company salary, medical benefits and multiple bonus opportunities.

reputed company is an equal opportunity employer. If you need accommodation during the interview process or reputed company, please let us know. We celebrate our inclusive work environment and welcome applicants from reputed company backgrounds and perspectives.

We thank you for your interest in joining the reputed company team! While we welcome reputed company applicants, only those selected for an interview will be contacted.

Originally posted on Himalayas

Apply To This Job