Note: The job is a remote job and is open to candidates in USA. CyberClan is hiring a Digital Forensic Incident Response Analyst to support incident response and post-breach remediation. The role involves conducting forensic investigations, developing response methods and guidelines, supporting clients and third parties, and contributing to a 24x7/365 service delivery team.

Responsibilities

• Responsible for supporting a wide number of technologies and being able to proficientlyperform advanced troubleshooting on the fly (packet captures, debugs, traffic analysis)
• Work on the continued development of CIRT and Machine investigation lifecycles as part ofthe ongoing process to enhance IR capabilities; also provided significant contribution to therevision of Incident Response and Post Breach Remediation policies, procedures andprocess
• Responsible for developing and documenting Incident Response methods and guidelines forthe organizations
• Perform live-endpoint investigation; including the identification and gathering of key forensicartifacts, offline investigation as needed and providing remediation actions as needed
• Implements and deploys an Incident Response focused ticketing system to improve incidenttracking, remediation and metrics for incidents worked
• Responsible for working with 3rd parties in order to assist with incident response, businessemail compromise, security breach, improve overall security, investigations,recommendations and remediation
• Developing and providing high-level technical reports in response to clients
• Serve as a member of a 24x7/365 service delivery team that handles incident response, postbreach remediation, escalation, required to perform complex investigations and/ortroubleshooting and driving root cause to resolution

Skills

• Minimum 2-3 years of experience in DFIR
• Experience in the deployment and management of EDR Technology
• Experience with Security Technologies and NIST Framework
• Developing, documenting and implementing incident response methods, process
• Perform live endpoint investigations
• Experience in forensic investigations both on-premise and cloud
• Strong knowledge of DFIR Tools
• Strong knowledge of Virtualization Technologies, Operating Systems, Firewalls, VPN's, SIEM, Enterprise Gateway Technologies, Networking Devices, Security Technologies, etc
• Candidate must have legal authorization to work in the US
• Certifications, GCIH, GCFE

Benefits

• Paid Time Off
• Paid Wellness Leave
• Paid Birthday Day Off
• Health Benefits
• 401k Matching
• 100% telecommuting

Company Overview