Senior Associate, Incident Response
Core
Senior technical lead deploying incident response expertise to support clients through the full lifecycle of security incidents, from triage and containment to forensic investigation and recovery.
Role type
Senior IC incident response technical lead
Builds
Incident response services for public and corporate clients
Domain
Cyber security / Incident response / Digital forensics
Required skills
Windows systems administration, network management, virtualization technologies, Endpoint Detection & Response (EDR), forensic investigation, scripting, threat actor knowledge
Preferred skills
Linux and MacOS forensics, incident response workstreams, GCFE/GCFA/GCIH/GNFA certifications, additional language proficiency
Technologies
Windows, SCCM, PowerShell, ESXi, Hyper-V, DNS, firewalls
Responsibilities
Support technical incident response from first contact through closure, oversee host- and network-based investigations, provide containment and recovery advice, develop and share domain expertise, participate in 24x7x365 on-call rotation
Seniority
Senior, hands-on IC with leadership responsibilities
