Pondurance

Consultant

• Conduct forensic host, network, and application technical investigations
• Triage active high-stakes security events, including reviewing and applying security controls to detect, respond, prevent and remediate threats
• Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be applied to current and future investigations
• Develop custom scripts, tools, or methodologies to enhance our IR processes
• Develop comprehensive and accurate reports of forensic findings and IR activities for both technical and executive audiences
• Effectively communicate investigative findings and strategy to various client stakeholders
• Provide clients with immediate actionable 0-day cybersecurity advice to stop and mitigate the damage of ongoing attacks
• Assist with the scoping of new engagements using a whole lifecycle approach, guiding the client from initial discovery through mitigation and remediation

Senior Incident Response Consultant

Security Analyst

• Analyze alerts and pivot into log data to identify, escalate, communicate, and contain threats, focusing on the direct interface with the customer's in-house security organization.
• Proactively conduct advanced threat hunting to seek out attacker presence in client environments.
• Continuously learn customer environments to develop a deep understanding of a client’s business drivers and risk appetite.
• Identify attack vectors, threat tactics, and attacker techniques, tailoring findings to meet specific client security needs, including driving the creation and tuning of alerts.
• Review and validate the work of other analysts, serving as a primary liaison with the customer, and ensuring alignment with their security requirements.
• Collaborate closely with internal teams to escalate and resolve issues, refine existing processes, and enhance Standard Operating Procedures (SOPs).
• Create and maintain trusted and strategic advisor relationships with key MDR Security customer stakeholders, including developing success criteria and plans to support monthly and quarterly presentations of measurable trends and outcomes.
• Engage directly with clients to understand, anticipate, and capture their needs, concerns, evolving objectives, and scope of operations.
• Shift work and holiday work are required as part of a 24/7/365 SOC.

Senior Security Analyst

• Support the 24/7/365 Security Operations Center (SOC) as Security Analyst II
• Serve as the escalation point for Security Analysts (Tier 1) and provide backup when required
• Answer incoming calls and internal and external emails
• Monitor, detect, and respond to customer alerts from logs and network sources within EDR solutions
• Review vulnerability reports and assessments
• Analyze intrusions, detect incidents, and assist in response
• Threat hunt and seek attacker presence on client networks and logs
• Identify attack vectors, threat tactics, and attacker techniques
• Proactively engage with clients to understand security needs
• Assist with reviews and provide reports on observed threats
• Research new threats to enterprise environments
• Assist Senior Security Analysts in hunt activities and intelligence actions
• Work with team to resolve issues, improve processes, and develop work instructions
• Analyze Indicators of Compromises (IOCs) and develop countermeasures
• Shift work and holiday work as part of 24/7/365 SOC

Senior Incident Response Consultant

Senior Security Analyst

Security Analyst II

Security Engineer