Cybersecurity Incident Response Lead

Job Summary

A company is looking for a Principal Consultant to lead Business Email Compromise and Ransomware engagements.

Key Responsibilities:

• Assist with scoping new engagements and guide clients through the incident response lifecycle
• Conduct forensic investigations and lead incident response training and assessments
• Develop reports on forensic findings and communicate strategies to client stakeholders

Required Qualifications:

• 5 - 10 years of experience in leading business email compromise and ransomware investigations
• Proficiency in forensic analysis tools and log analysis techniques
• Experience with coding and scripting in Python, PowerShell, SQL, or Bash
• Knowledge of EDR solutions and common adversarial tactics and techniques
• Experience in conducting ransomware negotiations is preferred