Digital Forensics Incident Response Consultant, Cybersecurity

November 15

Apply Now

Receive Emails with Similar Jobs

Ankura

WebsiteLinkedInAll Job Openings

Technology • Risk & Compliance • Turnaround & Restructuring • Disputes & Expert Testimony • Investigations

1001 - 5000 employees

🏢 Enterprise

🤖 Artificial Intelligence

💰 Private Equity Round on 2021-11

Description

• Participate in security incident investigations that involve computer crimes and require log, forensic, and malware analysis • Collect and analyze triage data, intrusion detection system alerts, firewall logs, network traffic logs, and host system logs to evaluate whether unauthorized access or information ex-filtration occurred • Perform forensic analyses to identify the presence of any malware, malware capabilities/actions, and what actions the malware took • Conduct security investigations in Linux, Apple, and/or Windows environments • Provide input into client communications, both written and oral, related to analyses performed for senior-level review

Requirements

• Bachelor’s or Master’s Degree in Computer Science/Cyber Security /MSIS or equivalent work experience • Experience working ransomware and BEC investigations • Approximately 2 - 5 years of experience working in the Incident Response space • Knowledge of malware reverse analysis utilizing leading industry toolsets. • Ability to conduct analysis of artifacts, disk images and perform memory forensics during incident response. • Understanding of how to communicate effectively and concisely with legal counsel, high-level management, and C-suite clients • Ability to approach and prioritize projects both from a long-range and immediate view • Experience working with non-Windows programs (such as Linux, Unix, Mac) • Comfortable/Experienced conducting command-line operations and utilizing scripts such as Python, PowerShell, Perl, or Bash • Strong desire to work on a team in a collaborative environment to achieve common goals • Preference is given to candidates with certifications such as CFCE, CCE, GCFE, GCFA, GCIH, GREM