- Remote, United States
- Remote
- Full-time · Senior
- 5+ years
At Soteria, our incident response professionals work directly with our clients to recover from incidents as quickly and effectively as possible. We strive to be the steady hand that guides our clients when they are having their worst day.
Responsibilities
- Provide clients with advice and guidance as they navigate the incident response and recovery process.
- Lead and participate in security incident and data breach investigations, triaging, collecting, and analyzing forensically valuable data to determine the scope and severity of incidents.
- Lead IR engagements and take ownership of multiple DFIR processes and procedures to improve overall team capabilities, ensuring timely delivery aligned with client expectations.
- Coordinate resources and teammates as needed to deliver engagements on time and with accuracy, tailoring each engagement to meet the client's specific response needs.
- Identify gaps in capabilities and tooling, and resolve those gaps to ensure the team is able to investigate new and unique threats.
Skills
digital forensicsincident responsenetwork breaches investigationbusiness email compromise (BEC)ransomware incidentstriage data analysisindicators of compromise (IOCs)Windows forensicsLinux forensicsUnix forensicsMacOS forensicslog analysisforensic data acquisitionnetworking conceptscrisis managementwritten communicationverbal communicationscriptingAxiomFTKSIEM