Senior Digital Forensics - Incident Response Consultant

December 13, 2024

Apply Now

Receive Emails with Similar Jobs

CYPFER

WebsiteLinkedInAll Job Openings

CYPFER is a global leader in cyber-attack incident response and ransomware post-breach recovery. The company provides a comprehensive range of cybersecurity services, including incident response, ransomware recovery, digital forensics, and cyber risk management. It offers services such as business email compromise resolution, cloud and web application investigations, dark web monitoring, and advisory. CYPFER is known for its rapid deployment of in-house specialists, providing 24/7 global support to ensure businesses stay secure and resilient against cyber threats. With a focus on integrating seamlessly with clients' operations, CYPFER is dedicated to offering unmatched care and commitment to cybersecurity.

Information Security • Cyber Security • Managed Security Services • SIEM • Digital Forensics and Incidence Response

51 - 200 employees

🔒 Cybersecurity

📋 Description

• Engage on behalf of CYPFER in incident response tasks, interacting with various insurance partners, legal counsel, incident response units, client executives, and technical teams. • Utilize standard tools and methodologies to collect forensic artifacts and images from affected systems. • Assist with Windows forensics and triage to assess compromise and investigations. • Familiarity with malware analysis tools and methodologies. • Apply mitigation strategies and concepts to remediate identified threats. • Analyze triage collections/artifacts for indicators of compromise (IOCs) and potentially malicious activity. • Review logs from host systems and appliances to identify suspicious activities. • Collect forensic disk and memory images from physical and virtual endpoints and servers. • Understanding of an incident lifecycle and cyber-kill-chain. • Correlate events and build timelines of events. • Maintain current knowledge on emerging threats and vulnerabilities. • Analyze files for IOCs using various techniques.

🎯 Requirements

• 2+ years of experience in digital forensics, incident response, or a similar role. • Knowledge of Windows and Unix/Linux operating systems. • Understanding of the functionality of EDR / EPP technologies. • Familiarity with forensic acquisition and analysis of physical and virtual systems. • Working knowledge of storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS. • Ability to analyze and interpret logs from various sources. • Ability to perform threat research and analyze current threats. • Understanding of business email compromise (BEC) cases and investigation techniques. • Participate in a rotating on-call schedule; ability to work on weekends and outside normal business hours as needed.