Apply on Employer Site

Pondurance · 1 day ago

Senior Incident Response Consultant

United States

Full-time

Remote

Senior Level

Pondurance is a company dedicated to helping organizations detect and respond to cyber threats. They are seeking a Senior Incident Response Consultant to support the Incident Response lifecycle, analyze intrusions, and provide technical analysis during investigations.

Cloud SecurityComplianceConsultingCyber SecurityNetwork SecuritySecurity

Responsibilities

Conduct forensic host, network, and application technical investigations

Triage active high-stakes security events, including reviewing and applying security controls to detect, respond, prevent and remediate threats

Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be applied to current and future investigations

Develop custom scripts, tools, or methodologies to enhance our IR processes

Develop comprehensive and accurate reports of forensic findings and IR activities for both technical and executive audiences

Effectively communicate investigative findings and strategy to various client stakeholders

Provide clients with immediate actionable 0-day cybersecurity advice to stop and mitigate the damage of ongoing attacks

Assist with the scoping of new engagements using a whole lifecycle approach, guiding the client from initial discovery through mitigation and remediation

Qualification

Incident ResponseForensic AnalysisMalware AnalysisEDR ToolsScriptingTechnical CertificationsAnalytical SkillsCommunication SkillsDecision Making

Required

Significant experience in a forensic and incident response role

Strong hands-on working knowledge of Windows OS and networking protocols

Strong hands-on working knowledge of Windows disk and memory forensics

Strong hands-on working knowledge of Unix OS and networking protocol

Strong hands-on working knowledge of network traffic analysis

Strong hands-on working knowledge of scripting and/or programming

Experience with commercial EDR (SentinelOne, Blackberry PROTECT, CarbonBlack, CrowdStrike) and Forensic tool suites (FTK, AXIOM, EnCase)

Reverse engineering and malware analysis

Demonstrated experience using analytical skills in a cybersecurity environment to triage and detect events transpired and deal with Ransomware forensic investigations

Demonstrated ability to make decisions on remediation and countermeasures for challenging information security threats

Experience in a technical role for a consulting company

Preferred

One or more of the following technical certifications preferred: GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), MCFE, EnCE or equivalent certifications