Senior CERT Specialist
Core
Senior technical authority leading digital forensics and incident response (DFIR) for high-profile cybersecurity incidents across New York City government agencies.
Role type
Senior IC DFIR practitioner / Incident Response Lead
Builds
Cyber-incident detection tools, automation, response capabilities, and custom tooling
Domain
Public sector cybersecurity / Digital Forensics
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Advanced log/file/malware analysis, memory/network/disk/cloud forensics, incident response leadership, technical mentorship, root-cause analysis, threat hunting, playbook development, tabletop exercise facilitation
Preferred skills
Experience with AWS/Azure/GCP, knowledge of adversary tradecraft and emerging vulnerabilities
Technologies
AWS, Azure, GCP
Responsibilities
Serve as senior technical escalation point for high-profile incidents; Lead complex incident response engagements end-to-end; Provide technical mentorship and peer review; Act as subject matter expert in advanced forensic analysis; Perform and oversee memory, network, disk, and cloud forensics; Devise and validate remediation strategies; Lead development of post-incident action plans and root-cause analyses; Design, build, and enhance cyber-incident detection tools and automation; Partner with threat intelligence teams to operationalize indicators and TTPs; Design and facilitate cyber tabletop exercises; Contribute to development of citywide incident response policies and playbooks; Assist agencies in maturing cyber incident response programs; Maintain current knowledge of cyber threat campaigns and share across team; Participate in on-call rotation covering weekends and nights.
Seniority
Senior, hands-on IC with mentorship responsibilities
