Principal Consultant, DFIR, Reactive Services (Unit 42) - Remote

Tasks

• Analyze Windows Linux and Mac systems
• Conduct host-based analysis
• Contain security incidents
• Determine breach scope
• Examine database log sources
• Examine firewall log sources
• Examine web log sources
• Guide clients through forensic investigations
• Identify indicators of compromise
• Improve security posture
• Investigate data breaches
• Lead incident response engagements
• Mentor junior team members
• Perform reactive incident response
• Provide remediation recommendations
• Scope incident response work
• Use forensic tools to determine breach source

Perks/Benefits

• Mentorship opportunities
• Remote work
• Travel as needed

Skills/Tech-stack

Breach response | Data Breach | Data breach response | Database logs | Digital forensics | EnCase | FTK | Firewall logs | Forensic analysis | Host-based Forensics | Incident Containment | Incident Response | Indicators of compromise | Linux forensics | MacOS forensics | Redline | SIFT | Security Incident Containment | Security incident | Splunk | Volatility | Web logs | Windows forensics | Wireshark | X-Ways