Senior Incident Response Expert

Our client is a top-tier cyber consulting and incident response company, working with organizations worldwide to proactively build their cyber resilience, and to respond to and defeat cyber attacks. Sygnia is a trusted advisor of IT and security teams, senior managements, and boards of top organizations, including Fortune 100 companies. It is currently seeking a Senior Incident Response Expert to join their expanding team.

Main Responsibilities:

• Take ownership in core IR effort or an entire work stream, and conduct complex IR tasks
• Technically lead small-scale investigations and small-scale proactive engagements
• Lead client communication on dedicated sessions and present reports
• Participate in ad-hoc scoping calls
• Lead publication efforts
• Participate and lead hiring interviews for IR experts, review home assignments
• Participate in forensic and incident response investigations, including large scale sophisticated attacks,conduct log analysis, host and network-based forensics and malware analysis.
• Participate in threat hunting: proactively hunt for targeted attacks and new emerging threats in client’s networks; as well as security assessments and simulations.
• Identify indicators of compromise (IOCs) and tools, tactics, and procedures (TTPs) to help ascertain whether and how breaches have occurred.
• Utilize and develop tools and methodologies to improve Sygnia’s existing investigative and hunting technological stack.
• Collaborate with IT and Security teams during investigations.
• Generate and present a comprehensive and professional report of findings from investigations.

Requirements:

• At least 5 years of a relevant experience
• Demonstrates strong analytical and critical-thinking abilities.
• Possesses a proactive approach to problem-solving and investigating complex security incidents
• Demonstrates adaptability, continuous learning and the ability to work collaboratively within multidisciplinary teams.
• Takes ownership of responsibilities and demonstrates commitment to delivering high-quality work.
• Demonstrated in-depth understanding of the life cycle of advanced security threats, attack vectors and variant methods of exploration.
• Deep technical understanding of network fundamentals and common Internet protocols.
• Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix and MacOS), including host-based forensics and experience with analyzing OS artifacts.
• Fluency with one or more scripting language (i.e. Python).
• Multidisciplinary knowledge and competencies, such as:
• Hands-on experience in data analysis (preferably network traffic or log analysis) in relevant data analysis and data science platforms (Jupyter, Splunk, pandas, SQL).
• Familiarity with cloud infrastructure, web application and servers, android and iOS mobile platforms.
• Experience with malware analysis and reverse engineering.
• Familiarity with enterprise SIEM platforms (e.g. Splunk, QR.adar, ArcSight).
• Excellent communication and interpersonal skills. Fluent English, including the ability to document and explain technical information in a concise, understandable manner.
• Ability to undertake international business travel, approximately 30% of working time, to support client engagements, on-site incident response investigations and other operational requirements

We regret that only shortlisted candidates will be notified.

EALicense No.: 08C3209

Registration No.: R1101742