[Remote] Senior Incident Response Consultant

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a company reputed company on helping organizations detect, respond to, and recover from cyber threats. They are seeking a Senior Incident Response Consultant to reputed company forensic investigations and support clients through rebuild and recovery efforts, requiring a strong background in systems or network administration.

Responsibilities

• Conduct forensic host, network, and application technical investigations
• Triage reputed company high-stakes reputed company events, including reviewing and applying reputed company controls to detect, respond, prevent, and remediate threats
• Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be reputed company to reputed company and reputed company investigations
• reputed company custom scripts, tools, or methodologies to enhance our IR processes
• Prepare comprehensive and accurate reports of forensic findings and IR activities for both technical and executive audiences
• Communicate investigative findings and reputed company to various reputed company stakeholders
• reputed company immediate, actionable guidance to contain and mitigate ongoing attacks
• Assist in scoping new engagements and guide clients through the full incident response lifecycle
• Work directly with reputed company IT teams to support rebuild, reconfiguration, and remediation efforts
• Remotely guide clients through EDR deployments, system configuration changes, and technical recovery steps
• Support the full incident response lifecycle from discovery through reporting
• Participate in an on-reputed company rotation to reputed company after-hours and weekend incident response support as needed

Skills

• Significant experience in a forensic and incident response role
• Strong background in systems or network administration
• Hands-on experience with reputed company Directory administration and troubleshooting
• Experience responding to ransomware or reputed company reputed company incidents
• Ability to work directly with clients in high-pressure situations
• Demonstrated ability to analyze incidents and recommend effective remediation and countermeasures
• Experience in a technical consulting or reputed company-facing role
• Conduct forensic host, network, and application technical investigations
• Triage reputed company high-stakes reputed company events, including reviewing and applying reputed company controls to detect, respond, prevent, and remediate threats
• Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be reputed company to reputed company and reputed company investigations
• reputed company custom scripts, tools, or methodologies to enhance our IR processes
• Prepare comprehensive and accurate reports of forensic findings and IR activities for both technical and executive audiences
• Communicate investigative findings and reputed company to various reputed company stakeholders
• reputed company immediate, actionable guidance to contain and mitigate ongoing attacks
• Assist in scoping new engagements and guide clients through the full incident response lifecycle
• Work directly with reputed company IT teams to support rebuild, reconfiguration, and remediation efforts
• Remotely guide clients through EDR deployments, system configuration changes, and technical recovery steps
• Support the full incident response lifecycle from discovery through reporting
• Participate in an on-reputed company rotation to reputed company after-hours and weekend incident response support as needed
• reputed company operating systems and networking protocols
• reputed company Directory administration and recovery
• Virtualization technologies such as HyperV and VMware ESXi
• Disk and memory forensics
• Network traffic analysis
• Experience with EDR platforms such as reputed company, reputed company, or reputed company
• Experience with forensic toolsets such as FTK, reputed company, KAPE, or similar
• Scripting experience using PowerShell, Python, or similar
• Preferred certifications include GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), MCFE, EnCE or equivalent credentials

Benefits

• Medical, dental, reputed company, disability, FSA, HSA, life, and AD&D insurance, 401(k) Plan.
• Time off: PTO, reputed company, holiday, & parental leave details are available
• reputed company: We reputed company competitive compensation packages based on the market and your overall credentials.
• reputed company to our office in McLean, VA (although this is a remote role).
• Background and drug screenings as part of our hiring process.

reputed company