The Consultant, Reactive Services is an individual contributor role within Unit 42, responsible for supporting digital forensics and incident response (DFIR) engagements across a wide range of client environments throughout Latin America.
Responsibilities
Support and execute digital forensics and incident response investigations across enterprise environments.
Conduct forensic analysis of endpoints, systems, logs, and cloud environments to identify attacker activity and scope of compromise.
Assist with host, network, and cloud investigations during active security incidents.
Perform forensic acquisition and preservation of evidence following industry best practices and chain-of-custody procedures.
Utilize industry-standard DFIR tools and methodologies to investigate malicious activity and support containment efforts.
Requirements
Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience
Nice to have: Experience supporting enterprise incident response investigations across cloud or hybrid environments
Nice to have: Familiarity with MITRE ATT&CK framework
An experienced Digital Forensics & Incident Response Senior Analyst to join Telstra’s Cyber Emergency Response Team, investigating and responding to complex security incidents across technology and network environments.
Responsibilities
Coordinate and support the response to complex cyber security incidents in a timely and effective manner.
Conduct digital forensic, host, network and log analysis to identify indicators of compromise and determine incident scope.
Gather, preserve and report digital evidence accurately, ensuring appropriate evidentiary standards are maintained.
Identify security gaps and recommend appropriate controls and remediation actions.
Partner with security, technology and business teams to strengthen cyber resilience.
Senior Information Security Engineer to support the Cyber Threat Fusion Center, leading incident response, digital forensics, and security consulting.
Responsibilities
Lead or participate in computer security incident response activities for moderately complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
The Principal serves as a tactical arm of eSentire’s Incident Response team, driving deep expertise and experience in incident response and digital forensics engagements, handling volatile and complex casework.
Compensation
The expected base salary range for this role is $180,000-$190,000K USD.
Responsibilities
Manage all CSI Team tools, physical devices and infrastructure components.
Renew relevant software licenses.
Renew infrastructure subscriptions.
Oversee the implementation of new technologies that support the CSI team mission.
Identify, research, and make written recommendations regarding new technologies that would drive efficiency or otherwise enhance the eSentire IR Program.
Requirements
four-year degree in a relevant discipline
military or law enforcement background with ten or more years of relevant work experience
The Principal serves as a tactical arm of eSentire’s Incident Response team, driving deep expertise and experience in incident response and digital forensics engagements, handling the most volatile and complex casework while ensuring optimum quality of service and responsiveness.
Locations (2)
Canada
United States
Compensation
The expected base salary range for this role is $180,000-$190,000K CAD. This range is for the primary location for which the job is posted. Actual compensation may vary depending on location and job-related factors such as qualifications, experience, knowledge, skills, and internal equity.
Responsibilities
Manage all CSI Team tools, physical devices and infrastructure components.
Renew relevant software licenses.
Renew infrastructure subscriptions.
Oversee the implementation of new technologies that support the CSI team mission.
Identify, research, and make written recommendations regarding new technologies that would drive efficiency or otherwise enhance the eSentire IR Program.
As a AI Security Engineer Senior Associate you will focus on protecting client systems and data from cyber threats through incident response, threat analysis, and security monitoring within our Advisory practice.
Responsibilities
Responding to cybersecurity incidents by triaging alerts, analyzing threat activity, and coordinating containment and recovery steps
Investigating security events using log analysis, digital forensics, and network forensics to identify root causes and attacker behavior
Developing incident response plans and remediation actions that reduce exposure across client environments
Applying cybersecurity frameworks, governance practices, and risk management methods to strengthen defensive controls
Monitoring security operations center activity and threat intelligence sources to identify emerging attack patterns and response priorities
Support DCDC cyberspace operations through mission coordination, operational analysis, documentation, information management, and broader cyber operational picture.
Compensation
Based on the roles, responsibilities, and requirements, the projected pay range for this position is: $155,000 - $175,000.
At Soteria, our incident response professionals work directly with our clients to recover from incidents as quickly and effectively as possible. We strive to be the steady hand that guides our clients when they are having their worst day.
Responsibilities
Provide clients with advice and guidance as they navigate the incident response and recovery process.
Lead and participate in security incident and data breach investigations, triaging, collecting, and analyzing forensically valuable data to determine the scope and severity of incidents.
Lead IR engagements and take ownership of multiple DFIR processes and procedures to improve overall team capabilities, ensuring timely delivery aligned with client expectations.
Coordinate resources and teammates as needed to deliver engagements on time and with accuracy, tailoring each engagement to meet the client's specific response needs.
Identify gaps in capabilities and tooling, and resolve those gaps to ensure the team is able to investigate new and unique threats.
Supports the Threat Analysis & Investigations function by analyzing digital evidence and investigating computer security incidents to support system and network vulnerability mitigation.
Responsibilities
Analyze log files, evidence, and other information to determine the best methods for identifying the perpetrator(s) of a network intrusion.
Confirm what is known about an intrusion and discover new information via dynamic analysis.
Provide technical summaries of findings in accordance with established reporting procedures and deliver written analysis reports to requesting customers.
Examine recovered data for information relevant to the matter at hand.
Perform file signature analysis and file system forensic analysis across implementations such as NTFS, FAT, and EXT.
Requirements
Bachelor's degree in Cybersecurity, Computer Science, Digital Forensics, Information Systems, or a related field
Principal Digital Forensics InvestigatorNeweSentire · Remote, US
Strategic Cyber AnalystNewBy Light Professional IT Services LLC · Fort Meade, US
Senior DFIR ExaminerNewSoteria - Security Solutions & Advisory · Remote, US
Digital Forensics & Incident Response AnalystNewMartinFed · Washington, US