Senior Incident Response Consultant

- Significant hands-on experience with hardware/software tools used in incident response, computer forensics, network security assessments, and/or application security. - 2 years of experience with assessing and developing enterprise-wide policies and procedures for IT risk mitigation and incident response. - Experience leading incident response teams and managing tasks across all phases of an engagement. - Experience managing a team of consultants with similar skills. - Capability of working independently and providing leadership on internal projects and client engagements. - Ability to forensically analyze both Windows & Unix systems for evidence of compromise. - Proficiency with industry-standard forensic tools such as EnCase, FTK, X-Ways, Sleuthkit. - Experience performing log analysis locally and via SIEM/log aggregation tools. - Experience hunting threat actors in large enterprise networks and cloud environments. - Familiarity with using and configuring Endpoint Detection & Response (EDR) tools. - Understanding of the behavior, security risks, and controls of common network protocols. - Familiarity with Active Directory, Exchange, and Office365 applications and logs. - Familiarity with tools and techniques required to analyze & reverse protocols and data traversing a network environment. - Familiarity with cloud computing platforms like IBM Cloud, AWS, GCP, or Azure. - Proficient in writing cohesive reports for a technical and non-technical audience. - Strong familiarity with various security frameworks and standards such as ISO 27001/2, PCI DSS, NIST800-53, and applicable data privacy laws and regulations. - Scripting or programming experience, preferably in a language commonly used for DFIR such as Python or PowerShell. - Ability to work with data at scale using Splunk / ELK. - Expertise working with shell programs such as grep, sed, and awk to process data quickly. - Working experience with virtualization and cloud technology platforms like IBM Cloud, AWS, GCP, & Azure.