Senior Consultant - Incident Response (CPX) (CPX)

As a Senior Incident Responder in the Incident Response & Forensics Team within a high-impact and operationally critical cyber defence environment, you live and breathe blue team operations. Your technical expertise in digital forensics and cyber incident response is well complemented by your integrity and passion for cyber security and technology in general. You work well in a team of highly motivated and skilled blue teamers, but you can also achieve your work independently in different engagements and scenarios. You enjoy taking on new challenges in a fast paced and dynamic working environment. You are a team player who is always willing to help out where required, with a humble and positive attitude. \u2022\u00A0 \u00A0 At least 3-5 years of experience in all (or at least most) of the following activities. Serve as technical lead on active incident response engagements. \u2022 \u00A0 \u00A0English communication skills and stakeholder management skills are a important to communicate investigation progress to clients \u2022 \u00A0 \u00A0Execute threat hunting activities in support of incident response engagements and SOC activities \u2022 \u00A0 \u00A0Perform host and/or network-based forensics across Windows, Mac and Linux platforms \u2022 \u00A0 \u00A0Execute digital forensic investigations supporting cyber incident response engagements \u2022 \u00A0 \u00A0Contribute to process documentation and continuous service improvement activities \u2022 \u00A0 \u00A0Produce detailed reports and technical briefs, effectively communicate tasks, methodology and guidance to customers \u2022 \u00A0 \u00A0Explain technical findings in a manner that can be easily understood by technical and non-technical stakeholders \u2022 \u00A0 \u00A0Demonstrate industry thought leadership through internal brown-bag sessions \u2022 \u00A0 \u00A0Perform research activities in search of service improvement tasks and threat landscape better understanding \u2022 \u00A0 \u00A0Help maintain the client-fostered DFIR Forensics Lab \u2022 \u00A0 \u00A0Be the team\u2019s subject matter expert on at least one of the following verticals: host forensics, network forensics, mobile forensics, malware analysis, OT/ICS Incident Response, cloud forensics, threat hunting. Ability to achieve tasks independently within the team after initial 3 months. Flexible schedule that is open to changing situations and opportunities. You must be a team player, with a humble and approachable nature who is willing to go the extra mile. \u2022 \u00A0 \u00A0Strong understanding of blue team operations, incident response management and digital forensics techniques \u2022 \u00A0 \u00A0Sound understanding of network protocols, TCP/IP etc. \u2022 \u00A0 \u00A0Sound understanding of Microsoft Windows \u2022 \u00A0 \u00A0Sound understanding of Linux and OSX \u2022 \u00A0 \u00A0Sound forensic skills across multiple operating systems \u2022 \u00A0 \u00A0Understanding of network analysis tools like Bro/Zeek, Rita or Suricata \u2022 \u00A0 \u00A0Ability to perform analysis of system and network devices logs \u2022 \u00A0 \u00A0Understanding of modern mobile devices and their OS \u2022 \u00A0 \u00A0Understanding of the capabilities of static and dynamic malware analysis \u2022 \u00A0 \u00A0Sound understanding of enterprise systems, technologies, and infrastructure\u00A0 \u2022 \u00A0 \u00A0Sound understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations \u2022 \u00A0 \u00A0Strong understanding of current threats, vulnerabilities, and attack trends \u2022 \u00A0 \u00A0Strong understanding of ATT&CK framework \u2022 \u00A0 \u00A0Understanding of AI security processes & ability to use AI properly within IR investigations \u2022 \u00A0 \u00A0Excellent organisational skills, ability to prioritise, and ability to work independently \u2022 \u00A0 \u00A0Ability to learn quickly and apply the learnings into the job on a day-to-day basis \u00A0\u2022 Good attention to detail and reporting accuracy, good stakeholder management & communication skills; excellent English language skills, both spoken and written \u2022 English language skills, both spoken and written \u2022 GIAC Certified in a minimum of one discipline: GNFA, GCIH, GCIA, GCFE, GCFA, GDAT, etc \u00A0 \u00A0 Or equivalent (eLearnSecurity .etc) \u2022 Previous experience performing digital forensics is A MUST \u2022 Previous experience performing digital forensics is a must \u2022 Bachelor's degree in Computer Science or Engineering desirable, but not mandatory

3-5 years of experience in incident response and/or digital forensics activities; strong English communication and stakeholder management skills; GIAC certification in GNFA, GCIH, GCIA, GCFE, GCFA, GDAT or equivalent (eLearnSecurity or similar); previous experience performing digital forensics is a must; Bachelor's degree in Computer Science or Engineering is desirable but not mandatory.

Serve as technical lead on active incident response engagements; execute threat hunting activities in support of incident response engagements and SOC activities; perform host and/or network-based forensics across Windows, Mac and Linux; execute digital forensic investigations supporting cyber incident response engagements; contribute to process documentation and continuous service improvement; produce detailed reports and technical briefs, communicate tasks and guidance to customers; explain technical findings to both technical and non-technical stakeholders; lead internal knowledge share sessions (brown-bag); perform research for service improvement and threat landscape understanding; help maintain the DFIR Forensics Lab; be the team's subject matter expert on at least one vertical (host forensics, network forensics, mobile forensics, malware analysis, OT/ICS IR, cloud forensics, threat hunting); work independently after initial 3 months; adapt to flexible scheduling.