Principal DFIR Consultant

🕒 il y a 8 jours

🏄 California – Distant

🏄 California – Remote

💵 $122 300 - $269 500 / an

⏰ Temps Plein

🔴 Expert

💼 Consultant

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Tokio Marine HCC

Site WebLinkedInTous les Emplois

1001 - 5000 employés

📦 Logistique

💼 Conseil

✈️ Tourisme

Logistics • Consulting • Travel

Tokio Marine HCC est un groupe mondial d'assurance et de réassurance spécialisé qui souscrit plus de 100 catégories d'assurance spécialisée dans plus de 180 pays. L'entreprise offre une large gamme de produits commerciaux, y compris : accident et santé, aviation, responsabilité civile, cyber et technologie, énergie, marine, voyage, récolte et risque transactionnel, en servant les courtiers, les entreprises et les partenaires de programme. Avec de solides notations financières (AM Best A++ / Fitch AA- / S&P A+) et une base de primes de plusieurs milliards de dollars, Tokio Marine HCC combine expertise en souscription, gestion de programmes et services de gestion des sinistres dans le cadre du Groupe Tokio Marine.

Description

• Lead incident response activities during cyber security breaches including initial triage, threat assessment, containment, eradication, and recovery phases • Act as the “Incident Commander” for insureds or their representatives during cyber incidents providing clear communication, recovery direction, and/or updates on investigation progress • Conduct scoping calls with clients to understand the disruption, develop a roadmap to resolve the cyber security event, and provide initial triage to contain the threat • Communicate complex cybersecurity concepts internally and externally • Build strong insured relationships and maintain trust through effective communication and timely delivery of investigation results • Relying on extensive knowledge and advanced leadership skills, accountable for supporting recruitment and development of a high-performing DFIR team • Provide mentorship to a team that will grow with time and experience • Lead case teams, assign tasks, delegate responsibilities, and oversee quality control on all analysis and work products • Perform post-incident analysis to identify root causes and implement preventive measures to mitigate future risks.

🎯 Exigences

• Minimum 4 year / bachelor’s degree in cyber security, Computer Science, Information Technology related degree or relevant professional work experience • 5 years former professional experience in leading and managing DFIR team and managing active cybersecurity engagements, including incident response, digital forensics investigations and working with insureds / clients and legal counsel • Advanced degrees or certifications (CISSP, CISM, GCFE, GCFA, GREM, GBFA, GCIH, CFCE, CCE) are a plus • 2 years prior people management or team leadership roles • Proven track record of success in leading/building DFIR teams and managing complex cyber incidents • Experience in conducting security investigations in Linux and Windows environments • Understanding of cloud platforms and security considerations within AWS, Azure, Microsoft 365, and GCP • Knowledge of digital forensic artifacts and tools such as ELK, Axiom, Encase, X-Ways, SIFT, FTK, Volatility, or Open-Source tools • Experience in Digital Forensics, Network Forensics, Memory Forensics, and/or Malware Analysis • Scripting skills (PowerShell, Bash, Python, Go) • Experience with EDR solutions (Defender, SentinelOne, CrowdStrike) • Strong understanding of legal and regulatory frameworks related to cyber security investigations such as PCI, NIST CSF. • Excellent communication and presentation skills to clearly and concisely communicate complex technical findings to clients and stakeholders • Strong leadership abilities to motivate and mentor team members • Superior organizational and analytical skills; demonstrated ability to manage multiple tasks simultaneously • Knowledgeable of industry changes, legal updates, and technical developments related to applicable area of the Company's business to proactively respond to changing business environment • Advanced proficiency and experience using Microsoft Office package.

🏖️ Avantages

• subsidized medical, prescription, dental, vision and basic life and disability insurance • employee assistance program • paid parental leave • 401(k) plan with Company matching contributions • at least 20 days of PTO • 11 paid holidays • one paid volunteer day • two paid floating holidays