Lead, Incident Response
Core
Lead digital forensics and incident response analysis, threat hunting, and readiness activities for a global financial services firm.
Role type
Senior IC digital forensics and incident response lead
Builds
Enterprise-wide forensic investigations and incident response capabilities
Domain
Financial services / Cybersecurity
Required skills
Digital forensics analysis, incident response, threat hunting, log/host/memory/network forensics, malicious code triage, scripting (Python/PowerShell/Bash), adversarial threat frameworks (MITRE ATT&CK, Cyber Kill Chain), enterprise forensic software (X-Ways, EnCase), SIEM query languages (SPL, KQL), EDR tooling, automation workflows
Preferred skills
None stated
Technologies
Active Directory/Entra, M365, Azure, AWS, Splunk, XSOAR, Python, PowerShell, Bash, X-Ways, EnCase
Responsibilities
Scope and perform enterprise-wide global investigations, leverage SPL and KQL for investigative workflows, utilize EDR tooling for analysis, perform log/host/memory/network forensics, perform malicious code triage, develop scripts and automation workflows for XSOAR, lead team-driven projects to advance forensic capabilities
Seniority
Senior, hands-on IC
