Note: The job is a remote job and is open to candidates in USA. CyberClan is hiring a Digital Forensic Incident Response Analyst to support incident response and post-breach remediation. The role involves conducting forensic investigations, developing response methods and guidelines, supporting clients and third parties, and contributing to a 24x7/365 service delivery team.
Responsibilities
- Responsible for supporting a wide number of technologies and being able to proficientlyperform advanced troubleshooting on the fly (packet captures, debugs, traffic analysis)
- Work on the continued development of CIRT and Machine investigation lifecycles as part ofthe ongoing process to enhance IR capabilities; also provided significant contribution to therevision of Incident Response and Post Breach Remediation policies, procedures andprocess
- Responsible for developing and documenting Incident Response methods and guidelines forthe organizations
- Perform live-endpoint investigation; including the identification and gathering of key forensicartifacts, offline investigation as needed and providing remediation actions as needed
- Implements and deploys an Incident Response focused ticketing system to improve incidenttracking, remediation and metrics for incidents worked
- Responsible for working with 3rd parties in order to assist with incident response, businessemail compromise, security breach, improve overall security, investigations,recommendations and remediation
- Developing and providing high-level technical reports in response to clients
- Serve as a member of a 24x7/365 service delivery team that handles incident response, postbreach remediation, escalation, required to perform complex investigations and/ortroubleshooting and driving root cause to resolution
Skills
- Minimum 2-3 years of experience in DFIR
- Experience in the deployment and management of EDR Technology
- Experience with Security Technologies and NIST Framework
- Developing, documenting and implementing incident response methods, process
- Perform live endpoint investigations
- Experience in forensic investigations both on-premise and cloud
- Strong knowledge of DFIR Tools
- Strong knowledge of Virtualization Technologies, Operating Systems, Firewalls, VPN's, SIEM, Enterprise Gateway Technologies, Networking Devices, Security Technologies, etc
- Candidate must have legal authorization to work in the US
- Certifications, GCIH, GCFE
Benefits
- Paid Time Off
- Paid Wellness Leave
- Paid Birthday Day Off
- Health Benefits
- 401k Matching
- 100% telecommuting
Company Overview