Responsibilities

Serve as technical & coordination lead on active incident response engagements

English communication skills and stakeholder management skills are a MUST, to coordinate technical staff and communicate investigation progress to clients

Execute and coordinate threat hunting activities in support of incident response engagements and SOC activities

Perform host and/or network-based forensics across Windows, Mac, and Linux platforms.

Execute digital forensic investigations supporting cyber incident response engagements

Contribute to process documentation and continuous service improvement activities

Lead the production of detailed reports and technical briefs, effectively communicate tasks, methodology and guidance to customers

Perform Quality Assurance activities over reports created by more junior members of the team

Explain technical findings in a manner that can be easily understood by technical and non-technical staff

Demonstrate industry thought leadership through creating and developing internal brown-bag sessions

Lead team research activities in search of service improvement tasks

Help maintain the client-fostered DFIR Forensics Lab

Be the team’s subject matter expert on at least two of the following verticals: host forensics, network forensics, mobile forensics, malware analysis, OT/ICS Incident Response, cloud forensics, threat hunting

• Ability to achieve tasks independently within the team after initial 2 months. Flexible schedule that is open to changing situations and opportunities, as is typical with incident response. You must be a team player, with a humble and approachable nature who is willing to go the extra mile.

.