Senior Incident Response Consultant

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $110k - $136k / year

⏰ Full Time

🟠 Senior

💼 Consultant

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Pondurance

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🏥 Healthcare

🛡️ Insurance

💰 Private Equity Round on 2020-10

Consulting • Healthcare • Insurance

Pondurance is a company that specializes in providing risk-based cybersecurity solutions. They offer managed detection and response (MDR) services, incident response, vulnerability management, and advisory services customized to meet the complex compliance and security demands of various industries. Known for their consultative and personalized approach, Pondurance empowers organizations to protect their valuable assets, reduce cyber risk, and maintain compliance. Their unique MDR solutions deliver ongoing risk assessments and cyber risk reduction reports through the MyCyberScorecard portal, making them a distinguished vendor in the Gartner 2024 Market Guide for Managed Detection and Response. By combining digital forensics and incident response expertise, Pondurance helps businesses navigate cybersecurity challenges with a tailored methodology and flexible pricing options.

📋 Description

• Conduct forensic host, network, and application technical investigations • Triage active high-stakes security events • Review and apply security controls to detect, respond to, prevent, and remediate threats • Recognize and codify attacker tools, tactics, and procedures into indicators of compromise • Develop custom scripts, tools, and methodologies to enhance incident response processes • Create comprehensive forensic findings and incident response reports for technical and executive audiences • Communicate investigative findings and strategy to technical staff, executives, third-party stakeholders, underwriters, and legal counsel • Provide immediate actionable zero-day cybersecurity advice to stop and mitigate ongoing attacks • Assist with scoping new engagements using a whole-lifecycle approach from discovery through mitigation and remediation • Support the incident response lifecycle and provide indicators to the SOC to enhance detection capabilities across network, log, and host data • Lead technical analysis of incident response investigations • Work with clients during high-stress incident response situations

🎯 Requirements

• 4+ years of experience in a forensic and incident response role • Strong hands-on working knowledge of Windows OS and networking protocols • Windows disk and memory forensics • Unix OS and networking protocols • Network traffic analysis • Scripting and/or programming • Experience with commercial EDR tools, including SentinelOne, BlackBerry PROTECT, Carbon Black, or CrowdStrike • Experience with forensic tool suites, including FTK, AXIOM, or EnCase • Reverse engineering and malware analysis • Knowledge of AWS infrastructure, services, and architecture • Demonstrated analytical skills in a cybersecurity environment to triage and detect events • Experience with ransomware forensic investigations • Ability to make decisions on remediation and countermeasures for challenging information security threats • Experience investigating credential compromise, privilege escalation, misconfigurations, unauthorized access, data exfiltration, and persistence in AWS environments • Experience in a technical role for a consulting company • One or more relevant technical certifications preferred, such as GCIH, GCFA, GREM, MCFE, or EnCE • Ability to provide off-hours support as needed • Background and drug screenings required as part of the hiring process • Must answer U.S. citizenship, U.S. residency, U.S. work authorization, and sponsorship questions in the application

🏖️ Benefits

• Medical, dental, vision, disability, FSA, HSA, life, and AD&D insurance • 401(k) Plan • PTO, sick leave, holidays, and parental leave • Bonus or other incentive compensation may be available • Inclusive culture of teamwork • Mentorship from accessible leaders • Opportunities to apply expertise, take on new challenges, and support customers’ security objectives

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume