[Hiring] Senior Digital Forensic Investigator @eSentire
This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more.
Role Description
The Senior Digital Forensic Investigator serves as a tactical arm of eSentire’s Incident Response team. Main function of this role is to drive deep expertise and experience in incident response, and digital forensics engagements.
• Handle the most volatile and complex casework while ensuring optimum quality of service and responsiveness.
• Casework spans from financially motivated data breaches to state-affiliated espionage and ideology-driven attacks.
• Operate in close coordination with eSentire’s SOC and Customer Success Management teams.
• Drive fast mobilization, source identification, containment, and quantification of informational losses in response to cyber attacks.
• Be available outside regularly scheduled work hours, including weekends and holidays.
• Encourage team members to catch up on personal business when not busy.
Responsibilities
• Drive deep domain expertise in cyber incident response and digital forensics engagements.
• Serve as case lead in the most demanding and volatile cyber investigations.
• Be a tactical force multiplier for all open and active investigations.
• Overlay with Customer Service Management and SOC teams to optimize quality of service.
• Own and manage all aspects of assigned incident response engagements.
• Be responsive to the customer’s voice and feedback.
• Strive for attention to detail and excellence in service delivery.
• Assist in scoping assignment activities as needed.
• Continually research and develop new methods and approaches to improve service delivery.
• Provide support and mentoring to junior level staff.
• Work rotating shifts and be available on an on-call basis as required.
• Be prepared to work for extended periods outside of regularly scheduled hours, including weekends and holidays.
• Be prepared to travel for short periods and work onsite at client locations throughout the United States and Canada, as required.
Requirements
• Four-year degree in a relevant discipline and eight to ten years of DFIR experience.
• Experience acting in an IR consultant capacity, particularly in the investigation and remediation of polymorphic trojans and modern ransomware variants.
• Conducting cloud-based investigations in AWS, GCP, Azure, and SaaS environments.
• Mastery of threat hunting using forensics at scale tooling and conducting web-based intrusion investigations.
• Extensive experience in one or more mainstream forensics tools such as EnCase, FTK, Axiom, X-Ways, etc.
• In lieu of education requirements, a military or law enforcement background with ten or more years of relevant work experience is acceptable.
• Demonstrable expertise in Digital Forensics Incident Response Investigations.
• Strong working knowledge of information security fundamentals.
• Working knowledge and hands-on experience with cybersecurity tools and technologies including:
• Endpoint Detection and Response (EDR): CrowdStrike, SentinelOne, Microsoft Defender for Endpoint (MDE)
• Security Information and Event Management (SIEM): Splunk, Sumo Logic, IBM QRadar, Microsoft Sentinel
• Firewall & VPN Logging Analysis: FortiGate, SonicWall, Meraki, WAF
• Mass Forensic Triage Tools: Velociraptor, KAPE, Hayabusa
• Active Directory Analysis Tools
• Security consulting and/or case investigation background preferred.
• Excellent written and verbal communication, listening and client management skills.
• Ability to articulate complex IT technical information to customers in a non-technical fashion.
• Self-motivated, strong analytical skills and detail-oriented.
• Demonstrated presentation skills.
Benefits
• Comprehensive health benefits.
• Flexible vacation plan.
• Participation in the company-wide equity program.
Accommodation
If you have any accessibility requirements during the recruitment process, please reach out to our HR team at [email protected] and any accommodation needs will be addressed upon request.
Your talents and unique perspectives are valued, and we look forward to the opportunity to work together to build a more inclusive future.
Apply Now
Apply Now
Role Description
The Senior Digital Forensic Investigator serves as a tactical arm of eSentire’s Incident Response team. Main function of this role is to drive deep expertise and experience in incident response, and digital forensics engagements.
• Handle the most volatile and complex casework while ensuring optimum quality of service and responsiveness.
• Casework spans from financially motivated data breaches to state-affiliated espionage and ideology-driven attacks.
• Operate in close coordination with eSentire’s SOC and Customer Success Management teams.
• Drive fast mobilization, source identification, containment, and quantification of informational losses in response to cyber attacks.
• Be available outside regularly scheduled work hours, including weekends and holidays.
• Encourage team members to catch up on personal business when not busy.
Responsibilities
• Drive deep domain expertise in cyber incident response and digital forensics engagements.
• Serve as case lead in the most demanding and volatile cyber investigations.
• Be a tactical force multiplier for all open and active investigations.
• Overlay with Customer Service Management and SOC teams to optimize quality of service.
• Own and manage all aspects of assigned incident response engagements.
• Be responsive to the customer’s voice and feedback.
• Strive for attention to detail and excellence in service delivery.
• Assist in scoping assignment activities as needed.
• Continually research and develop new methods and approaches to improve service delivery.
• Provide support and mentoring to junior level staff.
• Work rotating shifts and be available on an on-call basis as required.
• Be prepared to work for extended periods outside of regularly scheduled hours, including weekends and holidays.
• Be prepared to travel for short periods and work onsite at client locations throughout the United States and Canada, as required.
Requirements
• Four-year degree in a relevant discipline and eight to ten years of DFIR experience.
• Experience acting in an IR consultant capacity, particularly in the investigation and remediation of polymorphic trojans and modern ransomware variants.
• Conducting cloud-based investigations in AWS, GCP, Azure, and SaaS environments.
• Mastery of threat hunting using forensics at scale tooling and conducting web-based intrusion investigations.
• Extensive experience in one or more mainstream forensics tools such as EnCase, FTK, Axiom, X-Ways, etc.
• In lieu of education requirements, a military or law enforcement background with ten or more years of relevant work experience is acceptable.
• Demonstrable expertise in Digital Forensics Incident Response Investigations.
• Strong working knowledge of information security fundamentals.
• Working knowledge and hands-on experience with cybersecurity tools and technologies including:
• Endpoint Detection and Response (EDR): CrowdStrike, SentinelOne, Microsoft Defender for Endpoint (MDE)
• Security Information and Event Management (SIEM): Splunk, Sumo Logic, IBM QRadar, Microsoft Sentinel
• Firewall & VPN Logging Analysis: FortiGate, SonicWall, Meraki, WAF
• Mass Forensic Triage Tools: Velociraptor, KAPE, Hayabusa
• Active Directory Analysis Tools
• Security consulting and/or case investigation background preferred.
• Excellent written and verbal communication, listening and client management skills.
• Ability to articulate complex IT technical information to customers in a non-technical fashion.
• Self-motivated, strong analytical skills and detail-oriented.
• Demonstrated presentation skills.
Benefits
• Comprehensive health benefits.
• Flexible vacation plan.
• Participation in the company-wide equity program.
Accommodation
If you have any accessibility requirements during the recruitment process, please reach out to our HR team at [email protected] and any accommodation needs will be addressed upon request.
Your talents and unique perspectives are valued, and we look forward to the opportunity to work together to build a more inclusive future.
Apply Now
Apply Now