Principal Consultant, DFIR, Reactive Services (Unit 42)
Core
Lead incident response engagements and perform forensic investigations to identify, contain, and remediate security incidents for clients.
Role type
Principal Consultant, Digital Forensics and Incident Response (DFIR)
Builds
Reactive security incident response services and forensic analysis for enterprise clients
Domain
Cybersecurity, Digital Forensics, Incident Response
Deliverable
client delivery
Required skills
incident response leadership, host-based forensics, data breach investigation, forensic tool proficiency, cross-functional collaboration, mentorship
Preferred skills
complex technical engagement leadership, C-suite client interfacing, public speaking, executive presence
Technologies
EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark
Responsibilities
Manage and lead incident response engagements including scoping and guiding forensic investigations; Perform reactive incident response and host-based analysis on Windows, Linux, and Mac OS X systems; Examine firewall, web, database, and log sources to identify malicious activity; Investigate data breaches using forensic tools to determine source and scope; Provide actionable recommendations for long-term remediation; Act as a mentor for junior team members
Seniority
Principal, hands-on IC with strategic client leadership
