Incident Response Analyst

• Accountable to ensure excellence in every engagement, to include scoping, forensic analysis, reporting, hunting, remediation consulting, and client communication.
• Analyze malware, exploits and other suspicious files from DFIR cases to add context and threat intelligence, including performing deep reverse engineering analysis to understand malware functionality and attack vectors.
• Perform oversight on identified IOCs and enrich context when necessary through comprehensive malware reverse engineering.
• Augment both the forensics processing pipeline and malware analysis infrastructure with new tools and scenarios to streamline reverse engineering workflows.
• Spearhead efforts to publish blogs on unique threats, relevant DFIR cases, and new forensic discoveries during incidents, with emphasis on malware reverse engineering findings.
• Contribute as a lead investigator for engagements. Manage all aspects of a breach response and containment investigation.
• Technical investigative skills must include host-based forensic analysis, EDR-driven incident response, malware analysis, memory analytics, and network log investigations.
• Provide detailed and impactful formal investigative reports, to include technical findings and security improvement recommendations.
• Work closely with the threat intelligence team to pursue attribution, identify attack trends, innovative malicious TTPs, and contribute to community-facing publications and blogs.

Staff DFIR Analyst

Senior Incident Response Analyst

Senior Incident Response Analyst

Incident Handler, Detection & Response Services

Principal Engineer – Cyber Incident Response