We have an urgent role for a DFIR Analyst, which is remote. Please go through the JD below:
Role: DFIR Analyst
Duration: Full-time
Location: Remote (Australia)
Mode of Interview: 3-4 rounds of video interviews
Travel Required: 5% Travel
JOB DESCRIPTION
The successful candidate will work closely with the Director of Global Incident Response Operations. The ideal candidate will have an energetic, can-do attitude and be comfortable working in a metrics-driven environment, delivering results and supporting team members.
Essential Functions
- Responsible for supporting a wide number of technologies and being able to proficiently perform advanced troubleshooting on the fly (packet captures, debugs, traffic analysis)
- Work on the continued development of CIRT and Machine investigation lifecycles as part of the ongoing process to enhance IR capabilities; also provided significant contribution to the revision of Incident Response and Post-Breach Remediation policies, procedures, and processes.
- Responsible for developing and documenting Incident Response methods and guidelines for the organizations
- Performed live-endpoint investigation, including the identification and gathering of key forensic artifacts, offline investigation as needed, and providing remediation actions as needed.
- Implemented and deployed an Incident Response-focused ticketing system to improve incident tracking, remediation, and metrics for incidents worked.
- Responsible for working with 3rd parties to assist with incident response, business email compromise, security breaches, improve overall security, investigations, recommendations, and remediation.
- Developing and providing high-level technical reports in response to clients
- Serve as a member of a 24x7/365 service delivery team that handles incident response, post-breach remediation, escalation, required to perform complex investigations and/or troubleshooting and driving root cause to resolution.
Required Skills and Experience
- Minimum 2-3 years of experience in DFIR
- Experience in the deployment and management of EDR Technology
- Experience with Security Technologies and the NIST Framework
- Developing, documenting, and implementing incident response methods and processes
- Perform live endpoint investigations
- Experience in forensic investigations both on-premises and cloud
- Must be available to provide coverage to meet business requirements in 3 regions
- Strong knowledge of DFIR Tools
- Strong knowledge of Virtualization Technologies, Operating Systems, Firewalls, VPN’s, SIEM
- Enterprise Gateway Technologies, Networking Devices, Security Technologies, etc.
#J-18808-Ljbffr
DFIR Analyst in Adelaide employer: TTC Group (Tech Talent Consulting)
TTC Group (Tech Talent Consulting) offers a dynamic work environment where employees are encouraged to take initiative and contribute to the development of incident response capabilities. The company values a metrics-driven approach, fostering a culture of collaboration and support among team members. With opportunities for professional growth and involvement in critical projects, TTC Group is an attractive employer for those looking to advance their careers in tech consulting.
Contact Details:
TTC Group (Tech Talent Consulting) Recruitment Team
