Incident Response & Forensics Specialist - InfoPeople
New York, NY
About the Job
Seeking a highly technical Incident Response & Forensics Specialist. This position is a part of the IT Threat Intelligence group within the Cyber Security Operations Center and will be expected to provide direct support to the 24/7 Cyber Security Monitoring group as needed. The responsibilities include, but are not limited to, the following:
Serving as a primary point of contact for CSOC & MSSP Cybersecurity Incident escalations Interfaces directly with vendors & third parties for notified/observed compromises Forensics on memory, disks, and logs Malware analysis (dynamic & static) Involvement in full incident response lifecycle Processes evidence in accordance with Chain of Custody Creates Incident reports to brief to executive management Provide recommendations to prevent similar incidents Assist the Threat Intelligence group in other functions including o Threat Intelligence / Threat Hunting o Threat Readiness o Cyber Content Engineering & Automation
Skills:
Excellent communication skills
Strong experience with digital forensic tools Strong understanding and analysis of code such as Powershell, PERL, Python Cybersecurity certifications (preferred) Experience with OT & PCI technologies (preferred)
Minimum requirements:
Bachelor's degree in Computer Science, Information Services, or IT Security related field Or- A satisfactory equivalent with at least 3 years of IT-Security experience.
Minimum of 3 years of experience Tier 1 & 2 support for cyber security operation center.
Minimum of 2 years' experience with performing incident response functions & investigations
Serving as a primary point of contact for CSOC & MSSP Cybersecurity Incident escalations Interfaces directly with vendors & third parties for notified/observed compromises Forensics on memory, disks, and logs Malware analysis (dynamic & static) Involvement in full incident response lifecycle Processes evidence in accordance with Chain of Custody Creates Incident reports to brief to executive management Provide recommendations to prevent similar incidents Assist the Threat Intelligence group in other functions including o Threat Intelligence / Threat Hunting o Threat Readiness o Cyber Content Engineering & Automation
Skills:
Excellent communication skills
Strong experience with digital forensic tools Strong understanding and analysis of code such as Powershell, PERL, Python Cybersecurity certifications (preferred) Experience with OT & PCI technologies (preferred)
Minimum requirements:
Bachelor's degree in Computer Science, Information Services, or IT Security related field Or- A satisfactory equivalent with at least 3 years of IT-Security experience.
Minimum of 3 years of experience Tier 1 & 2 support for cyber security operation center.
Minimum of 2 years' experience with performing incident response functions & investigations
Source : InfoPeople
