About Our Team
We are looking for a dedicated and skilled Incident Response Specialist to join our Security Consulting team.
The ideal candidate will have experience in incident response, cybersecurity, and SIEM platform monitoring. They will be responsible for leading investigations of cyber-attacks, monitoring security concerns, developing new detection content, and supporting the triage and containment of cyber security incidents.
Your Responsibilities
* Lead the investigation of cyber-attacks against customers as part of the global Incident Response team.
* Monitor SIEM platforms for security concerns and develop new detection content based on changes in the threat environment.
* Develop tools, tradecraft, playbooks, and other materiel to support the response to, and investigation of, cyber security incidents.
* Support the triage and containment of cyber security incidents and recovery efforts to restore systems to operational states.
* Conduct forensic analysis of Windows, Linux and macOS devices and gather relevant log files such as operating system, firewall, proxy and DNS logs.
* Provide assessment and analysis of attacker tools, techniques, and procedures of different actors from hacktivist to criminal to nation state.
* Supervise and mentor junior security consultants and support their development of incident response skillsets.