Digital Forensic Incident Responder

We are looking for an enthusiastic and experienced Digital Forensic Incident Responder (DFIR) to join our dynamic and growing team. You will play a critical role in maintaining the security and resilience of Elements digital infrastructure by effectively handling cyber incidents.

This is an opportunity to join an emerging team and become a key contributor on day one. You will work closely with peers to develop what you see as a great 24/7 operational cyber defense capability. We encourage applications from those with direct experience in Digital Forensics and Incident Response (DFIR).

This position requires paid on call and overtime if there are serious cyber-attacks.

Compensation: Base salary up to 135K overtime paid when working on serious incidents.

• Help build Elements IR capability. Implement best practice in line with NIST SANS and other industry frameworks
• Govern and coordinate cyber incidents. Act as the lead incident manager and technical authority for Cyber Defense. Conduct thorough investigations to reduce risk. Determine the root cause impact and identify remediation actions
• Collaborate with cross-functional teams including IT Privacy and Legal and senior stakeholders. Prepare and present written and verbal incident status reports to ensure the business is kept up to date
• Conduct post-incident reviews and analysis to identify areas for improvement and help drive continuous improvement
• Perform digital forensics on computer/network artefacts to assess the risk and impact of an incident. Perform malware analysis
• Work closely with the Senior Manager Incident Response to Input into the development of cyber defense metrics
• Stay abreast of the latest cyber threats attack vectors and security technologies to continuously improve the organizations incident response capabilities

• A minimum of 5 years experience working in cyber security. Technical experience as a Cyber Incident Responder e.g. Digital Forensics Incident Response (DFIR). Experience in managing complex cyber incidents would be great
• Experience of in working within a complex highly federated organization. A comprehensive understanding of cyber defense operations in both the public and private sectors
• A bachelors degree in Computer Science Information Technology or a related field is desirable but not essential as are other relevant certifications (e.g. CISSP CISM GIAC)
• Attention to detail strong analytical skills and efficient problem solving. The ability to think critically and make sound decisions in high-pressure situations
• Cultural sensitivity and social flexibility in a global corporate environment
• Experience in proactive communication to and direct interaction with senior staff. The ability to convey complex information to a non-technical audience
• A highly self-motivated individual with positive mindset and can-do attitude. A strong believer of security as an enabler to support business growth
• This position requires on call and overtime if there are very serious cyber attacks
• Knowledge of SIEM tooling including experience in writing and developing advanced hunting and correlation search queries for alerts
• Must be a US Citizen or Green Card holder

#LI-SL1

#LI-SL1

At Element we always take pride in putting our people first. We are an equal opportunity employer that recognizes diversity and inclusion as fundamental to our Vision of becoming the worlds most trusted testing partner.

All suitably qualified candidates will receive consideration for employment on the basis of objective work related criteria and without regard for the following: age disability ethnic origin gender marital status race religion responsibility of dependents sexual orientation or gender identity or other characteristics in accordance with the applicable governing laws or other characteristics in accordance with the applicable governing laws.