Language Fluency: English (Required)

Work Shift:

Please review the following job description:

Essential Duties and Responsibilities

Following is a summary of the essential functions for this job. Other duties may be performed both major and minor which are not mentioned below. Specific activities may change from time to time.

• As Digital Forensics & Incident Response (DFIR) professionals individuals in this role must be wellversed in log packet network endpoint root cause analysis containment and eradication.

• A programming computer science or data science background will be important to success in this role as unstructured data will need automated decisions made and other data reduction techniques applied. Depending on the candidate the role will likely start with basic searches and visualizations but may rampup to leveraging Machine Learning and Artificial Intelligence tools. Familiarity with programming and malicious code critical to success in this role.

• Must have a strong knowledge of windows internals to effectively respond to and eradicate advanced attacks. This role must advocate for the organizations threat hunting efforts. The ability to quickly identify nefarious artifacts versus benign activity will be a key skill for this position. Cyber & Respond Engineers will be asked to consult on a variety of problems (technical and nontechnical) within the team and larger organization.

Qualifications

Required Qualifications:

The requirements listed below are representative of the knowledge skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelors degree in Computer Science Computer Engineering Cybersecurity or related field of relevant education certification or related training.

• 6 years of experience in Cybersecurity or related work

• Knowledge of one or more cloud platforms and cloud security

• Knowledge of general information technology (IT) and cybersecurity

• Knowledge of computer networking concepts and protocols and network security methodologies.

• Knowledge of network traffic analysis and packetlevel analysis using appropriate tools (e.g. Wireshark tcpdump).

• Knowledge of operating systems including Windows/Unix ports and services.

• Knowledge of modern identity and access management concepts

• Knowledge of phishing tactics and techniques

• Knowledge of advanced cyber threats and vulnerabilities.

• Knowledge of cyberattack stages (e.g. reconnaissance scanning enumeration gaining access escalation of privileges maintaining access network exploitation covering tracks).

• Knowledge of adversarial tactics techniques and procedures

• Knowledge of intrusion detection methodologies and techniques for detecting host and networkbased intrusions.

• Knowledge of incident response and handling methodologies.

• Knowledge of countermeasures to address a variety of threats

• Knowledge around leveraging automation ML and/or AI

• Knowledge of advanced threat hunting techniques

• Knowledge of types of digital forensics data and how to recognize them.

• Knowledge of types and collection of persistent data.

• Knowledge of file system implementations (e.g. New Technology File System NTFS File Allocation Table FAT File Extension EXT).

• Knowledge of which system files (e.g. log files registry files configuration files) contain relevant information and where to find those system files.

• Knowledge of processes for seizing and preserving digital evidence.

Preferred Qualifications:

• Experienced in a dedicated Threat Hunting role

• Experienced working with EDR/XDR technology (e.g. CrowdStrike Products Microsoft Defender Suite)

• Experience working in cloud environments namely Microsoft Azure and Amazon AWS.

• Industry certifications in general technology (e.g. Network AWS Certified Cloud Practitioner Microsoft Azure Fundamentals etc.

Other Job Requirements / Working Conditions

Sitting

Constantly (More than 50 of the time)

Visual / Audio / Speaking

Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.

Manual Dexterity / Keyboarding

Able to work standard office equipment including PC keyboard and mouse copy/fax machines and printers.

Availability

Able to work all hours scheduled including overtime as directed by manager/supervisor and required by business need.

Travel

Minimal and up to 10