Sr. Cyber Analyst, Digital Forensics Incident Response

Why you should join our At-Bay Security team:At-Bay is a fast-growth InsurSec company (Insurance x Cybersecurity) on a mission to bring innovative products to the market that help protect small businesses from digital risks. As an InsurSec provider, we uniquely combine insurance with mission-critical security technologies, threat intelligence, and human expertise, to bridge the critical security capability gap that exists among SMBs in the community. We believe InsurSec is an $80B market opportunity and we are excited to expand our DFIR team in order to help expand our reach and influence in the business and security community, of which we serve 35,000 customers.The Role:Our Digital Forensics and Incident Response (DFIR) teams deliver incident investigation and response services to At-Bay insureds via:Forensically sound collection, transmission, and storage of digital evidenceAnalysis of digital evidence to identify indicators of compromise and adversary activityDevelopment of incident timelines and theories of compromiseIdentification of incident root causesParticipation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessaryDevelopment and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessaryDevelopment and delivery of recommendations to mitigate the risk of future incidents for impacted insuredsDevelopment and delivery of incident response training and simulations for targeted insuredsKey skills:Previous digital forensics and incident response experienceStrong oral and written communication skillsPrevious hands-on experience performing digital forensics and incident response, including several of the following: Business Email CompromiseRansomwareDigital evidence collection and analysisDevelopment and analysis of cyber threat intelligenceLeadership of or participation in investigations involving digital evidenceIntrusion detection / cyber threat huntingMalware analysisIncident recovery activities such as restoration of data from backups, operation of decryptor tools, etc. Previous hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.)Strong knowledge of Windows and Unix/Linux operating systemsExpertise in threat hunting, network forensics, and EDR / EPP technologiesMinimum requirements:Bachelor’s degree or equivalentMinimum of 4 years of experience in cybersecurity operations, incident response, incident recovery, or another security disciplineWillingness to travel as needed to perform job functionsPreferred requirements:Significant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurityPrevious background in law enforcement or government/military with experience leading complex technical investigationsKnowledge of cloud environments, including knowledge of cloud security products and services offered by major cloud service providers (e.g., AWS, Azure, Google)Experience in a top-10 cyber consulting firm or leading DFIR provider preferredOne or more industry cybersecurity certifications (e.g., GCIH, Security+, CISSP, etc.)Work location:USA, nationwideRemote PositionOur estimated base pay range for this role is $130,000-$150,000 per year. Base salary is determined by a variety of factors including but not limited to market data, location, internal equitability, domain knowledge, experiences and skills. In general, if the position sparks your interest we encourage you to apply - our team prioritizes talent.Originally posted on Himalayas