Incident Response Security Consultant, Mandiant (English)

Responsibilities

• Collaborate with internal and customer teams to investigate and contain incidents.
• Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.
• - Collaborate with internal and customer teams to investigate and contain incidents. - Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations. - Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.

Minimum qualifications:

Preferred qualifications:

Qualifications

• Minimum qualifications: - Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience. - 3 years of experience working end to end incident response investigations, analysis, or containment actions. - 3 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics. - Ability to communicate in English fluently to work with internal partners and customer teams. - Ability to travel up to 30%. Preferred qualifications: - Certifications in cloud platforms. - Experience in security competitions, Capture the Flags (CTFs) or testing platforms such as Hack the Box, TryHackMe, Overthewire, etc. - Ability to communicate investigative findings and strategies to technical staff, executive leadership, legal counsel, and internal and external clients. - Ability to communicate in French fluently, to work with internal partners and customer teams. - Excellent time and project management skills.