Senior Advisor, Incident Response

This is a fully remote position, open to applicants in Texas.

📋 Description

• Oversee the intake, processing, and disposal of physical devices and digital media for incident response, ensuring effective physical space management, chain of custody, forensic imaging, and the management of the digital media lifecycle.

• Provide support for both physical and virtual infrastructure utilized for customer interactions, addressing requests from consultants and customers concerning engagement data and technology.

• Work collaboratively with cross-functional teams to execute solutions that satisfy functional requirements, including troubleshooting and resolving issues.

• Apply advanced and specialized knowledge of legacy products, services, technologies, and infrastructure to improve usability, availability, and security.

• Utilize expertise in security-related protocols, products, and internally developed technologies to create innovative security solutions.

• Engage in and offer security solutions throughout all phases of the digital media lifecycle, encompassing forensic imaging efforts and data pre-processing initiatives.

• Contribute to Change Management processes by participating in pre-deployment Quality Assurance testing of planned technology changes to ensure reliability and serviceability.

• Produce documentation regarding processes and procedures related to digital media lifecycle management, forensic imaging, and data pre-processing to enhance operational efficiency.

• Act as the primary Emergency Incident Response (EIR) Intake consultant, managing incoming calls, verifying customer service levels, creating account records, and leading initial scoping discussions.

• Organize the commercial documentation necessary to commence work efforts, including Engagement Work Orders (EWO) and Statements of Work (SOW).

• Oversee initial evidence intake for EIR engagements, equipping forensic tools such as Endpoint Detection & Response (EDR) agents and other third-party forensic analysis solutions.

• Set up cloud analysis Virtual Machines (VMs) for consultants, acting as a subject matter expert on VM provisioning and troubleshooting.

• Maintain and manage lab physical equipment to support forensic investigations and incident response initiatives.

⛳️ Requirements

• Minimum of 5 years of professional experience in managed threat response and remediation.

• 5 years of experience with threat actor tactics, techniques, and procedures (TTPs), as well as identifying and analyzing vulnerabilities and employing tools to exploit them.

• 5 years of experience in digital forensics, network forensics, and security practices.

• 5 years of experience managing incident response engagements, including documentation and case handling within CRM systems.

• 5 years of experience with encryption methods and Multi-Factor Authentication (MFA).

• 5 years of experience creating end-user documentation.

• 5 years of experience in firewall management and information security protocols.

• 5 years of experience in Microsoft Windows, Linux, and Unix system administration.

• 5 years of experience with network security infrastructure, including load balancers, reverse proxies, and web proxies.

• 5 years of experience provisioning cloud infrastructure using AWS and Azure, alongside troubleshooting cloud infrastructure challenges.

• 5 years of experience provisioning forensic tools for Endpoint Detection & Response (EDR) solutions.

• 5 years of experience leading Emergency Incident Response scoping discussions.

🏝️ Benefits

• Sophos employs a remote-first working model, prioritizing remote work for most employees, though some roles may require a hybrid arrangement.

• Our team fosters innovation and creativity, all while enjoying a strong sense of fun and camaraderie.

• Employee-led diversity and inclusion networks that cultivate community and provide education and advocacy.

• Annual charity and fundraising initiatives, along with volunteer days, enabling employees to contribute to local communities.

• Global employee sustainability initiatives aimed at reducing our environmental impact.

• Global fitness and trivia competitions to keep our bodies and minds engaged.

• Global wellbeing days for employees to unwind and recharge.

• Monthly wellbeing webinars and training sessions to support employee health and wellbeing.