Sr. Cyber Analyst, Digital Forensics Incident Response

The role

This person will deliver incident investigation and response services to At-Bay insureds. They will perform digital evidence collection, analysis, and incident recovery activities.

What you will do

• Forensically sound collection, transmission, and storage of digital evidence
• Analysis of digital evidence to identify indicators of compromise and adversary activity
• Development of incident timelines and theories of compromise
• Identification of incident root causes
• Participation in threat actor negotiations as necessary
• Participation in incident recovery activities as necessary
• Development and delivery of incident reports to document key incident details
• Development and delivery of recommendations to mitigate the risk of future incidents
• Development and delivery of incident response training and simulations

Required qualifications

• Previous digital forensics and incident response experience
• Strong oral and written communication skills
• Previous hands-on experience performing digital forensics and incident response, including several of the following: Business Email Compromise, Ransomware, Digital evidence collection and analysis, De
• Previous hands-on experience working in information technology operations
• Strong knowledge of Windows and Unix/Linux operating systems
• Expertise in threat hunting, network forensics, and EDR / EPP technologies
• Bachelor’s degree or equivalent
• Minimum of 4 years of experience in cybersecurity operations, incident response, incident recovery, or another security discipline
• Willingness to travel as needed to perform job functions

Nice to have

• Significant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurity
• Previous background in law enforcement or government/military with experience leading complex technical investigations
• Knowledge of cloud environments, including knowledge of cloud security products and services offered by major cloud service providers (e.g., AWS, Azure, Google)
• Experience in a top-10 cyber consulting firm or leading DFIR provider
• One or more industry cybersecurity certifications (e.g., GCIH, Security+, CISSP, etc.)

About the company

At-Bay is a fast-growth InsurSec company that combines insurance with security technologies, threat intelligence, and human expertise. They serve 35,000 customers to help protect small businesses from digital risks.