Cyber Security Specialist - Incident Response & Forensics

Cyber Security Specialist - Incident Response & ForensicsThe technical Incident Response & Forensics Specialist is a part of the IT Threat Intelligence group within the Cyber Security Operations Center and will be expected to provide direct support to the 24/7 Cyber Security Monitoring group as needed. The responsibilities include, but are not limited to, the following:Serving as a primary point of contact for Client CSOC & MSSP Cybersecurity Incident escalationsInterfaces directly with vendors & third parties for notified/observed compromisesForensics on memory, disks, and logsMalware analysis (dynamic & static)Involvement in full incident response lifecycleProcesses evidence in accordance with Chain of CustodyCreates Incident reports to brief to executive managementProvide recommendations to prevent similar incidentsAssist the Threat Intelligence group in other functions including o Threat Intelligence / Threat Hunting o Threat Readiness o Cyber Content Engineering & AutomationSkills:Excellent communication skillsStrong experience with digital forensic toolsStrong understanding and analysis of code such as Powershell, PERL, PythonCybersecurity certifications (preferred)Experience with OT & PCI technologies (preferred)Minimum requirements:Bachelor's degree in computer science, Information Services, or IT Security related field –Or- A satisfactory equivalent with at least 3 years of IT-Security experience.Minimum of 3 years of experience Tiers 1 & 2 support for cyber security operation center.Minimum of 3 years' experience with performing incident response functions & investigationsInformation Security – 6+ years of experience