Pondurance is hiring a
Senior Incident Response Consultant

Summary

The job is for a Senior Incident Response Consultant at Pondurance. The role involves supporting the IR lifecycle, analyzing intrusions, detecting incidents, and responding to clients. Remote work is allowed but candidates in McLean, VA or Indianapolis, IN are preferred.

Requirements

• Strong hands-on working knowledge of Windows OS and networking protocols, Windows disk and memory forensics, Unix OS and networking protocol, Network traffic analysis, Scripting and/or programming
• Experience with commercial EDR (SentinelOne, Blackberry PROTECT, CarbonBlack, CrowdStrike) and Forensic tool suites (FTK, AXIOM, EnCase)
• Reverse engineering and malware analysis
• Significant experience in a forensic and incident response role

Responsibilities

• Conduct forensic host, network, and application technical investigations
• Triage active high-stakes security events
• Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs)
• Develop custom scripts, tools, or methodologies to enhance IR processes
• Develop comprehensive and accurate reports of forensic findings and IR activities for both technical and executive audiences
• Effectively communicate investigative findings and strategy to various client stakeholders
• Provide clients with immediate actionable 0-day cybersecurity advice to stop and mitigate the damage of ongoing attacks
• Assist with the scoping of new engagements using a whole lifecycle approach, guiding the client from initial discovery through mitigation and remediation

Preferred Qualifications

• One or more of the following technical certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), MCFE, EnCE or equivalent certifications
• Demonstrated experience using analytical skills in a cybersecurity environment to triage and detect events transpired and deal with Ransomware forensic investigations
• Demonstrated ability to make decisions on remediation and countermeasures for challenging information security threats
• Experience in a technical role for a consulting company

Benefits

• Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance, 401(k) Plan
• Time off: PTO, sick, holiday, & parental leave details are available
• Competitive compensation packages based on the market and your overall credentials