Digital Forensics Analyst

Incident Response

Threat Hunting

Purple Team Operations

Detection Engineering

Forensics

Basic Qualifications

• Associate's degree in Cybersecurity, Computer Science, Information Technology, Mathematics and 2 + years of relevant experience OR;
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Mathematics and 2 + years of relevant experience OR;
• Master's degree in Cybersecurity, Computer Science, Information Technology, Mathematics OR;
• PhD in Cybersecurity, Computer Science, Information Technology, Mathematics OR;
• In lieu of a degree must have 6+ years' experience in Cyber Security or Information Technology
• Must be a US Citizen

Preferred Qualifications

• 3+ years focused on incident response, threat hunting, or DFIR.
• 6+ years' experience in Cyber Security or Information Technology
• Experience with various memory acquisition techniques/tools: FTK Imager Volatility 3 Velociraptor for remote memory dumps
• FTK Imager
• Volatility 3
• Velociraptor for remote memory dumps
• Experience with enterprise SIEM platforms such as: Microsoft Sentinel Splunk Enterprise Security Elastic Security
• Microsoft Sentinel
• Splunk Enterprise Security
• Elastic Security
• Experience with EDR technologies including: Microsoft Defender XDR CrowdStrike Falcon SentinelOne Singularity
• Microsoft Defender XDR
• CrowdStrike Falcon
• SentinelOne Singularity
• Familiarity with: Windows Event Logs Sysmon KQL Sigma rules YARA PowerShell Python Memory analysis Malware triage
• Windows Event Logs
• Sysmon
• KQL
• Sigma rules
• YARA
• PowerShell
• Python
• Memory analysis
• Malware triage
• Understanding of: Attack chains Identity-based attacks Cloud attack techniques Detection engineering principles
• Attack chains
• Identity-based attacks
• Cloud attack techniques
• Detection engineering principles
• Experience with adversary emulation frameworks.
• Familiarity with: Caldera Prelude Operator Velociraptor TheHive
• Caldera
• Prelude Operator
• Velociraptor
• TheHive
• Cloud security investigation experience in: Microsoft Azure Amazon AWS Google Cloud
• Microsoft Azure
• Amazon AWS
• Google Cloud

Certifications

Infinite Potential

Pay Range

• Pay ranges for remote employees are based on the state where the employee resides and may vary from the posted range.

Benefits

• Rolls-Royce provides a comprehensive and competitive Total Rewards package that includes base pay and a discretionary bonus plan. Eligible employees may have the opportunity to enroll in other benefits, including health, dental, vision, disability, life and accidental death & dismemberment insurance; a flexible spending account; a health savings account; a 401(k) retirement savings plan with a company match; Employee Assistance Program; Paid Time Off; certain paid holidays; paid parental and family care leave; tuition reimbursement; and a long-term incentive plan. The options available to an employee may vary depending on eligibility factors such as date of hire, employment type, and the applicability of collective bargaining agreements.