This is a fully remote position, open to applicants in United States.

📋 Description

• Perform thorough analyses of security events and indicators to ascertain the nature and severity of incidents.

• Quickly respond to security incidents by utilizing established incident response protocols.

• Collaborate with cross-functional teams to effectively contain and mitigate cyber threats.

• Conduct forensic investigations to identify the root causes of incidents and develop remediation plans.

• Lead proactive threat hunts to discover and examine detection gaps.

• Leverage threat intelligence and industry best practices to improve incident detection capabilities.

• Work together on strategies and procedures for the recovery, preservation, and presentation of computer evidence while ensuring the prevention of spoliation.

⛳️ Requirements

• Over 8 years of experience in cyber incident response within a large and complex environment.

• Relevant industry certifications are strongly preferred (CISSP, GCIH, GFCA, GREM, ECIH).

• Expertise in SIEM, IDS/IPS, EDR, and network monitoring tools.

• Comprehensive understanding of incident response methodologies, including containment, eradication, and recovery processes.

• Familiarity with common security frameworks such as NIST, SANS, and CSA.

• Proficient in acquiring and analyzing endpoint and network artifacts, volatile memory, malicious files/binaries, and scripts.

• Experience with forensic tools including EnCase, FTK, Axiom, and Cellebrite.

• Ability to collaborate effectively with forensic analysts, law enforcement personnel, and legal professionals on the recovery, preservation, and presentation of computer evidence.