Senior Incident Response Forensics Analyst – All Genders

🔥 52 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

🧐 Analyst

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Arctic Wolf

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

The cybersecurity industry has an effectiveness problem. Every year new technologies, vendors, and solutions emerge, and yet despite this constant innovation we continue to see high profile breaches in the headlines. All organizations know they need better security, but the dizzying array of options leave resource-constrained IT and security leaders wondering how to proceed. At Arctic Wolf, our mission is to End Cyber Risk through effective security operations. To achieve this, we believe that organizations must do three key things:

📋 Description

• Conduct forensic investigations for organizations affected by targeted threats, organized crime, politically motivated groups, ransomware, and other commodity threats • Perform host forensic analysis on Windows, Linux, and Mac OS systems • Perform network analysis using firewall logs, NetFlow, and intrusion detection/prevention tool logs • Assist with or conduct forensic acquisition and analysis from Azure, AWS, and GCP environments • Use applicable tooling to contain and eradicate threat actors during live intrusion events • Perform basic static and dynamic analysis of malicious binaries and scripts • Make tactical recommendations for compromised client organizations • Communicate executive-level and detailed findings verbally and in writing • Present technical findings to assist external legal counsel in understanding potential regulatory implications • Communicate investigation details coherently and de-escalate situations • Scope new cases and lead update calls when needed • Stay current with DFIR developments and integrate relevant developments into processes and procedures • Partner with internal teams to publish blogs about threat actor tactics, techniques, procedures, and vulnerabilities • Mentor junior analysts on technical and soft skills • Conduct audits and peer reviews of incident reports • Foster information sharing and collaboration • Participate in weekday escalation and weekend/holiday on-call schedules

🎯 Requirements

• Three or more years professional experience with digital forensics and incident response or other similar cybersecurity roles • Ability to respond to inquiries and work beyond normal business hours, as needed • Advanced knowledge of host-based forensic, network analysis, and data breach response • Advanced knowledge of current attack vectors and trends in cybersecurity • Ability to identify indicators of compromise (IOC) from newly released exploits that have little to no community documentation • Experience with IR and forensic tools, such as Magnet Axiom, EnCase, FTK, X-Ways, SIFT, and other open-source forensic tools • Experience with commercial Endpoint Detection and Response (EDR), network monitoring, and Security Information and Event Management (SIEM) tools • Preferred: Bachelor’s Degree in Information Security, Digital Forensics, Computer Science, or another related field • Preferred: GCFA, GCFE, ACE, EnCE, or similar training and certification • Preferred: Prior consulting experience • Preferred: Prior experience presenting at industry conferences and events • Preferred: Prior experience developing scripts and tools to analyze data • Preferred: Prior experience with malware analysis and reverse engineering • Ability to work weekday escalation and weekend/holiday on-call schedules • Background checks are required • Authorization to receive software or technology controlled under applicable U.S. export control laws and regulations, if applicable

🏖️ Benefits

• Equity for all employees • 28 days annual leave, 8 bank holidays and paid volunteering days off • Pension plan employer match • Training and career development programs • Robust Employee Assistance Program (EAP) with mental health service • Comprehensive private benefits plan including medical insurance, virtual GP, optical and dental cashback, life insurance (4x basic salary) and group income protection • Fertility support and paid parental leave • Family-forming benefits and enhanced maternity benefits

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume