Professional Services Principal Consultant - Incident Response (Remote, GBR)

Description

The company is a cybersecurity firm that has protected organizations since 2011, helping them stop breaches with its AI-native platform.

Its large-scale distributed systems handle close to 3 trillion events a day, and that volume grows every day.

Customers come from every industry and depend on the company to keep their operations running and their communities safe.

Staff have flexibility and autonomy and are expected to help build responsible AI adoption, experimentation and innovation, using an AI-first approach to speed up work, build skills, find insights and solve hard problems.

This is a consulting role on the services team, which takes on a wide range of engagements, including high-profile incident response investigations for organizations on the Fortune 100 list.

Responsibilities

• Act as the technical lead on incident response engagements.
• Build and apply new techniques to search large volumes of data for threat actors.
• Take direction from external legal counsel when running intrusion investigations.
• Carry out host-based and/or network-based forensics on Windows, Mac and Linux systems.
• Write and present clear reports, recommendations and findings for customer management, regulators and legal counsel, both in writing and out loud.
• Build thought leadership through blog posts, CrowdCasts and public speaking.

Requirements

• Experience in one or more of the following areas is expected:
• Incident response: running or managing investigations into targeted threats such as advanced persistent threats, organized crime and hacktivists.
• Computer forensic analysis: using a range of forensic tools to establish how far a compromise reaches.
• Network forensic analysis: solid knowledge of network protocols, tools such as Bro/Zeek or Suricata, and analysis of related network logs.
• Reverse engineering: understanding what static and dynamic malware analysis can reveal about a threat.
• Incident remediation: deep understanding of targeted attacks and the ability to design tactical and strategic remediation plans for compromised organizations.
• Network operations and architecture/engineering: a strong grasp of secure network design and hands-on network operations experience.
• Cloud incident response: knowledge of incident response methods on AWS, Azure or GCP.
• Communication: explaining findings to executives or in technical depth to clients, and passing on tasks, guidance and methods to internal teams.
• Completing technical work without close supervision.
• A desire to build both technical and soft skills.
• Strong project management skills.
• Contributing thought leadership to the incident response field.
• Helping to create a positive work environment and attitude.
• Proven experience using AI technologies to improve decisions, streamline workflows and processes, raise efficiency and drive business results.
• A degree (BA, BS, MA or MS) in computer science, computer engineering, mathematics, information security, information assurance, information security management, intelligence studies, cybersecurity, cybersecurity policy or a related field. Candidates without a degree but with relevant work experience and/or training will still be considered.
• Bonus: GIAC Certified Incident Handler (GCIH).
• Bonus: GIAC Certified Forensic Analyst (GCFA) or GIAC Certified Forensic Examiner (GCFE).
• Bonus: Certified Information Systems Security Professional (CISSP).
• Bonus: Certified Ethical Hacker (CEH).
• Bonus: OSCP or OSCE, Offensive Security certifications suited to more offensive and technical IR work.
• Bonus: cloud incident response experience on AWS, Azure or GCP.

Conditions

This is a remote role based in the UK (GBR).

The company is an equal opportunity employer that supports veterans and people with disabilities through an affirmative action program, and it bases all employment decisions on valid job requirements.

Benefits

• Pay and equity awards that lead the market.
• Physical and mental wellness programs.
• Competitive vacation and holiday time.
• Paid parental and adoption leave.
• Professional development available to everyone, whatever their level or role.
• Employee networks, local neighborhood groups and volunteering opportunities.
• Office culture with world-class amenities for those who visit an office.
• Certified as a Great Place to Work across the globe.