Sr. Cyber Analyst, Digital Forensics Incident Response
为什么你应该加入我们的 At-Bay 安全团队：At-Bay 是一个快速增长的 InsurSec 公司 （保险 x 网络安全）致力于将创新产品带入市场，帮助保护小企业免受数字风险的影响。作为一个 InsurSeC 提供商，我们独特地结合保险与关键任务的安全技术，威胁情报和人才专业知识，以弥合社区中小型企业之间存在的关键安全能力差距。我们相信 InsurSe C 是80B 美元的市场机会，我们很高兴扩大我们的 DFIR 团队来帮助扩大我们的影响力在商业和安全界，其中我们为35,000客户服务。角色：· 我们的数字法医和事件响应 (DFIR) 团队通过：· 法学上合理的收集，传输和存储数字证据 · 对妥协和敌对活动的指标进行分析 · 开发事故时间表和妥协理论 ·确定事件根源原因 · 如有必要参与威胁行为者谈判 （例如赎金谈判等）· 与此相关的恢复活动 （如备份数据恢复，重新图像工作站和服务器，重建网络基础设施等）提供了事件调查和响应服务。· 开发和交付事件报告，以为参与方记录关键事件细节，包括保险人员的执行领导人，违规指导律师以及 At-Bay 索赔管理工作人员；必要时制定和交付建议来减轻受影响保险人的未来事故风险；· 勒索软件 · 数字证据收集和分析 · 网络威胁情报的开发和分析 · 对数字证据涉及调查的领导或参与 · 侵入检测/网络威胁猎杀 ·恶意软件分析 · 事件恢复活动，如备份数据恢复，解密工具操作等 · 在信息技术领域之前的工作实践经验。
查看英文原文
Why you should join our At-Bay Security team:
At-Bay is a fast-growth InsurSec company (Insurance x Cybersecurity) on a mission to bring innovative products to the market that help protect small businesses from digital risks. As an InsurSec provider, we uniquely combine insurance with mission-critical security technologies, threat intelligence, and human expertise, to bridge the critical security capability gap that exists among SMBs in the community. We believe InsurSec is an $80B market opportunity and we are excited to expand our DFIR team in order to help expand our reach and influence in the business and security community, of which we serve 35,000 customers.
The Role:
· Our Digital Forensics and Incident Response (DFIR) teams deliver incident investigation and response services to At-Bay insureds via:
· Forensically sound collection, transmission, and storage of digital evidence
- Analysis of digital evidence to identify indicators of compromise and adversary activity
- Development of incident timelines and theories of compromise
- Identification of incident root causes
- Participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)
- Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary
- Development and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessary
- Development and delivery of recommendations to mitigate the risk of future incidents for impacted insureds
- Development and delivery of incident response training and simulations for targeted insureds
Key skills:
- Previous digital forensics and incident response experience
- Strong oral and written communication skills
- Previous hands-on experience performing digital forensics and incident response, including several of the following:
- Business Email Compromise
- Ransomware
- Digital evidence collection and analysis
- Development and analysis of cyber threat intelligence
- Leadership of or participation in investigations involving digital evidence
- Intrusion detection / cyber threat hunting
- Malware analysis
- Incident recovery activities such as restoration of data from backups, operation of decryptor tools, etc.
- Previous hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.)
- Strong knowledge of Windows and Unix/Linux operating systems
- Expertise in threat hunting, network forensics, and EDR / EPP technologies
Minimum requirements:
- Bachelor’s degree or equivalent
- Minimum of 4 years of experience in cybersecurity operations, incident response, incident recovery, or another security discipline
- Willingness to travel as needed to perform job functions
Preferred requirements:
- Significant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurity
- Previous background in law enforcement or government/military with experience leading complex technical investigations
- Knowledge of cloud environments, including knowledge of cloud security products and services offered by major cloud service providers (e.g., AWS, Azure, Google)
- Experience in a top-10 cyber consulting firm or leading DFIR provider preferred
- One or more industry cybersecurity certifications (e.g., GCIH, Security+, CISSP, etc.)
Work location:
- USA, nationwide
- Remote Position
Our estimated base pay range for this role is $130,000-$150,000 per year. Base salary is determined by a variety of factors including but not limited to market data, location, internal equitability, domain knowledge, experiences and skills. In general, if the position sparks your interest we encourage you to apply - our team prioritizes talent.
Originally posted on Himalayas