- Remote, United Kingdom
- Remote
- Full-time · Principal
- 3–8 years
Lead and produce deliverables for reactive incident response engagements, managing incident response from scoping to remediation and mentoring junior team members.
Responsibilities
- Manage and lead incident response engagements, including scoping work, guiding clients through forensic investigations, and containing security incidents.
- Perform reactive incident response and host-based analysis on Windows, Linux, and Mac OS X systems to identify Indicators of Compromise.
- Examine firewall, web, database, and other log sources to identify evidence of malicious activity and attack vectors.
- Investigate data breaches using forensic tools like EnCase, FTK, X-Ways, SIFT, and Splunk to determine the source and scope of compromises.
- Provide clients with clear, actionable recommendations for long-term remediation and security posture improvement.
Requirements
- Bachelor's degree in Information Security, Computer Science, Digital Forensics, or a related field
- Master's degree in Information Security, Computer Science, Digital Forensics, or a related field
- PhD in Information Security, Computer Science, Digital Forensics, or a related field
- Nice to have: leadership
- Nice to have: client interfacing