Senior Cybersecurity Incident Responder
Core
Lead digital forensics & incident response (DFIR) engagements and proactive advisory services for major cybersecurity incidents.
Role type
Senior Cybersecurity Incident Responder (IC)
Builds
DFIR reports, containment/eradication/recovery strategies, threat intelligence briefings, and threat models
Domain
Cybersecurity / Digital Forensics / Incident Response
Deliverable
client delivery
Required skills
Digital forensics investigation, root cause analysis, adversary activity timeline construction, intrusion vector identification, evidence collection and preservation, incident response coordination, post-incident review facilitation, stakeholder communication in crisis situations
Preferred skills
Basic scripting (PowerShell, Bash, Python, Ruby), knowledge of attacker TTPs, familiarity with security frameworks (NIST CSF, MITRE ATT&CK, D3FEND)
Technologies
EnCase, X-Ways, Magnet Axiom, Velociraptor, KAPE, THOR, CrowdStrike, Microsoft Defender, Splunk, Sentinel, EDR, SIEM, XDR
Responsibilities
Conduct thorough investigations into major security incidents to determine root causes and impact; analyze affected systems using forensic techniques; utilize security tooling to investigate confirmed or suspected compromises; collect digital forensics evidence in accordance with industry standards; produce comprehensive DFIR reports; support coordination of containment, eradication, and recovery efforts; deliver proactive services including tabletop exercises and threat hunting; participate in on-call roster for major incidents; travel to customer sites as required
Seniority
Senior, hands-on IC
