Sr. Cyber Analyst, Digital Forensics Incident Response

Our Digital Forensics and Incident Response (DFIR) teams deliver incident investigation and response services to At-Bay insureds via:

Forensically sound collection, transmission, and storage of digital evidence

Analysis of digital evidence to identify indicators of compromise and adversary activity

Development of incident timelines and theories of compromise

Identification of incident root causes

Participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)

Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary

Development and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessary

Development and delivery of recommendations to mitigate the risk of future incidents for impacted insureds

Development and delivery of incident response training and simulations for targeted insureds

Key skills:

Previous digital forensics and incident response experience

Strong oral and written communication skills

Previous hands-on experience performing digital forensics and incident response, including several of the following:

Business Email Compromise

Ransomware

Digital evidence collection and analysis

Development and analysis of cyber threat intelligence

Leadership of or participation in investigations involving digital evidence

Intrusion detection / cyber threat hunting

Malware analysis