- Boston, Massachusetts, United States
- 8+ years
Lead emergency incident response engagements end to end, delivering people-led, AI-driven forensics on the 7AI platform.
Responsibilities
- Run scoping calls with clients, breach counsel, and cyber insurance carriers to define each engagement's scope, objectives, and deliverables.
- Manage engagements end to end: plan the investigation, coordinate collection, track timeline and budget, and keep client and counsel updated on a steady cadence.
- Lead and personally perform enterprise investigations across host, network, cloud, SaaS, and application evidence, including ransomware, business email compromise, data theft, and intrusion matters.
- Serve as the escalation point for PLAID ELITE analysts when a case needs forensic collection, malware analysis, or root-cause determination, and mentor them through the investigation.
- Collect and analyze evidence through the 7AI platform and Velociraptor, writing and maintaining the VQL artifacts each case needs.
Requirements
- Nice to have: GIAC certifications
- Nice to have: GCFA
- Nice to have: GCFE
- Nice to have: GNFA
- Nice to have: GREM
