6 дней назад
Principal Consultant (DFIR)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Principal Consultant (DFIR) (Cybersecurity): Leading high-profile incident response engagements, investigating forensic evidence across endpoint, network, cloud, and operating-system environments with an accent on digital forensics, malware analysis, and customer crisis communication. Focus on coordinating responders, identifying threat activity through hypothesis-driven analysis, preserving evidence, and improving incident response services.
Location: Remote, United States
Company
provides identity and access management, exposure management, risk, managed detection and response, and incident response services supported by its Meridian platform and AI-enabled operations.
What you will do
- Lead responses to high-profile and sensitive customer security incidents.
- Perform incident triage, determine scope and impact, identify vulnerabilities, and recommend remediation actions.
- Manage the full incident response lifecycle, from preparation and detection through resolution, reporting, and lessons learned.
- Collect, preserve, triage, and analyze forensic artifacts from client networks and devices.
- Use EDR, log collection, endpoint, network, and SIEM platforms for large-scale investigations.
- Communicate findings to customers and train, coach, and supervise junior and ad-hoc responders.
Requirements
- At least 5 years of professional services or information security experience, including 3 or more years in incident response.
- Industry-recognized digital forensics or incident response certification, such as GCIH, GCFA, GCFE, CFCE, GREM, EnCE, or CCE.
- Experience coordinating incidents, leading response teams, and explaining complex technical topics to technical and non-technical audiences.
- Experience investigating Windows, Linux, macOS, and cloud environments, with expertise in endpoint, memory, network forensics, or malware analysis.
- Knowledge of the Incident Response Lifecycle, Cyber Kill Chain, MITRE ATT&CK, evidence preservation, indicators of compromise, and threat actor analysis.
- Experience with forensic tools, Elasticsearch, data analytics platforms, endpoint and network technologies, SIEMs, Python, PowerShell, and project management.
Nice to have
- Certifications such as CISSP, OSCP, ITIL, COBIT, or SABSA.
- Working knowledge of NIST SP 800-61r2, ISO 27035, ISO 27001, and ISO 27002.
Culture & Benefits
- Medical insurance covering employees and dependents, life insurance, and a retirement match program.
- Paid time off, sick and casual leave, maternity and paternity leave, bereavement leave, and volunteer time.
- Professional development reimbursement and access to a LinkedIn learning platform.
- Mobile phone reimbursement.
- Benefits mention a hybrid work model with 2–3 days in the office, while the role is listed as remote.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
11 дней назад
Senior Forensic Analyst (Cybersecurity)
130 000 - 170 000$
CrowdStrike
8 дней назад
Engagement Lead, Incident Response Partner Services (Remote)
115 000 - 160 000$
11 дней назад
Senior Threat Hunter Analyst (Cybersecurity)
125 000 - 150 000$
10 дней назад
Security Incident Response Lead (AI)
185 200 - 326 800$
10 дней назад
Principal Incident Response Engineer (AI)
117 200 - 157 500$
13 дней назад
Dir Security Operations & Engineering (Cybersecurity)
138 000 - 200 100$