Minimum qualifications:

• Experience leading Incident Response investigations, analysis, or containment actions.
  
• Experience with network and log forensic analysis, malware triage analysis, and disk and memory forensics.
  
• Experience with enterprise security architecture and security controls.
  

Preferred qualifications:

• Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
  
• Certifications in Cloud Platforms (e.g., Google Cloud Platform).
  
• Experience with Cloud incident response or forensics.
  
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, legal counsel, and internal and external clients.
  
• Excellent written/verbal communication skills, with the ability to develop documentation and explain technical details in a concise manner.
  
• Excellent time management skills.
  

About the job

Responsibilities

• Collaborate with internal and customer teams to investigate and contain incidents. Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations. 
  
• Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs).
  
• Build scripts, tools, or methodologies to enhance Mandiant’s incident investigation processes that can be applied to current and future investigations.
  
• Develop and present comprehensive and accurate reports, trainings, and presentations for technical and executive audiences.
  
• Utilize Mandiant technology to conduct investigations and examine end-point and network-based sources of evidence.
  

NOV  

Kitopi  

APCO  

Emirates NBD  

Sana Commerce  

Bayut | dubizzle  

Pipecare Group  

Sabre Corporation  

Oxinus Holdings  

Infomineo