Principal Consultant, Incident Response (Unit 42)
Core
Lead client-facing incident response engagements, performing forensic investigations and providing expert guidance on containment and remediation to enhance security posture.
Role type
Principal Consultant, Incident Response
Builds
Reactive incident response services and forensic analysis deliverables for enterprise clients
Domain
Cybersecurity, Digital Forensics, Incident Response
Deliverable
client delivery
Required skills
Incident response leadership, host-based forensics, data breach response, forensic tool proficiency (EnCase, FTK, X-Ways, SIFT, Splunk), Windows/Linux/Mac OS analysis, log analysis
Preferred skills
Complex technical engagement leadership, C-suite executive interfacing, public speaking, conference presentations, publications
Technologies
EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark
Responsibilities
Manage and lead incident response engagements from scoping to containment; Perform reactive incident response and host-based analysis on Windows, Linux, and Mac OS X systems; Examine firewall, web, database, and log sources to identify malicious activity; Investigate data breaches using forensic tools to determine source and scope; Provide actionable recommendations for long-term remediation; Act as a mentor for junior team members
Seniority
Principal, hands-on IC with mentorship
