Lead, Incident Response
Core
Lead digital forensics and incident response analysis, threat hunting, and readiness activities for a global financial services firm.
Role type
Senior IC digital forensics and incident response lead
Builds
Enterprise-wide forensic investigations and incident response capabilities
Domain
Financial services / Cybersecurity
Required skills
Digital forensics analysis, Incident response, Threat hunting, Log/host/memory/network forensics, Malicious code triage, Enterprise forensic software suites (X-Ways, EnCase), Adversarial threat frameworks (MITRE ATT&CK, Cyber Kill Chain), Scripting (Python, PowerShell, Bash), Splunk SPL, Microsoft KQL, XSOAR automation
Preferred skills
None stated
Technologies
Active Directory/Entra, M365, Azure, AWS, Splunk, X-Ways, EnCase, XSOAR
Responsibilities
Scope and perform enterprise-wide global investigations with on-prem and cloud technologies, Leverage Splunk SPL and Microsoft KQL for investigative workflows, Utilize EDR tooling for enterprise-wide investigations, Perform log, host, memory, and network-based forensics, Perform malicious code triage, Develop scripts, queries, and automation workflows for XSOAR
Seniority
Senior, hands-on IC
