Senior Incident Response Consultant
Apply NowLocation:
McLean, VA, US
Company:
Pondurance specializes in cybersecurity solutions and incident response services to help organizations detect and respond to cyber threats effectively.
Summary:
The Senior Incident Response Consultant at Pondurance will conduct forensic investigations and support clients during cyber incidents. Candidates should have significant experience in cybersecurity and relevant technical certifications.
Requirements:
Technology: Windows OS, Unix OS, Network traffic analysis, EDR tools (SentinelOne, CrowdStrike, etc.)
Hard Skills: Forensic analysis, Incident response, Network traffic analysis, Scripting or programming, EDR tools familiarity
Credentials: One or more of the following technical certifications preferred: GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), MCFE, EnCE or equivalent certifications.
Experience: Significant experience in a forensic and incident response role, Demonstrated experience using analytical skills in a cybersecurity environment to triage and detect events transpired and deal with Ransomware forensic investigations, Experience in a technical role for a consulting company
Job Description:
About the Role:
Are you a people person with cybersecurity expertise? Are you able to provide exceptional
support to customers in their greatest time of need? Do you want to influence real change? Do
you want to be part of the solution? Then join Pondurance in ensuring every organization is able
to detect and respond to cyber threats – regardless of size, industry or current in-house
capabilities.
As part of the Incident Response team at Pondurance, your focus will be supporting the IR
lifecycle and providing indicators to the SOC that will assist in enhanced detection capabilities of
network, log, and host data. You will utilize your technical chops to analyze intrusions, detect
incidents, and assist in responding to our clients. You must be capable of working in a high
stress IR situation and effectively navigate through the IR lifecycle. You will be responsible for
leading the technical analysis of an IR investigation as well as communicating effectively and
providing off-hours support as needed.
Responsibilities:
- Conduct forensic host, network, and application technical investigations
- Triage active high-stakes security events, including reviewing and applying security controls to detect, respond, prevent and remediate threats
- Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be applied to current and future investigations
- Develop custom scripts, tools, or methodologies to enhance our IR processes
- Develop comprehensive and accurate reports of forensic findings and IR activities for both technical and executive audiences
- Effectively communicate investigative findings and strategy to various client stakeholders
- Provide clients with immediate actionable 0-day cybersecurity advice to stop and mitigate the damage of ongoing attacks
- Assist with the scoping of new engagements using a whole lifecycle approach, guiding the client from initial discovery through mitigation and remediation
Technologies:
- Strong hands-on working knowledge of:
- Windows OS and networking protocols
- Windows disk and memory forensics
- Unix OS and networking protocol
- Network traffic analysis
- Scripting and/or programming
- Experience with commercial EDR (SentinelOne, Blackberry PROTECT, CarbonBlack, CrowdStrike) and Forensic tool suites (FTK, AXIOM, EnCase)
- Reverse engineering and malware analysis
Knowledge and Skills:
- Significant experience in a forensic and incident response role
- Demonstrated experience using analytical skills in a cybersecurity environment to triage and detect events transpired and deal with Ransomware forensic investigations
- Demonstrated ability to make decisions on remediation and countermeasures for challenging information security threats
- Experience in a technical role for a consulting company
If you have other combinations of relevant skills and experience that you expect make you the
right candidate for this role, please let us know!
Who we are:
At Pondurance we embrace, educate, and protect people by helping make our world a better and safer place. We believe in inviting good people into our company who are driven to become great!
Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape.
