Description

You will lead digital forensic investigations and incident response for insured businesses, performing forensic evidence collection, analysis, and recovery. You will also develop incident reports, provide mitigation recommendations, and participate in threat actor negotiations and recovery activities.

Requirements

• Previous digital forensics and incident response experience
• Strong oral and written communication skills
• Hands-on experience with BEC, ransomware, evidence collection, intrusion detection, malware analysis, and recovery
• Experience leading or participating in digital investigations
• Information technology operations experience

Responsibilities

• Forensically collect, transmit, and store digital evidence
• Analyze digital evidence to identify indicators of compromise and adversary activity
• Develop incident timelines and theories of compromise
• Identify incident root causes
• Participate in threat actor negotiations and incident recovery activities