Senior Information Security Forensics Analyst

Job Description

Summary Description Summary of This Role Evaluates, tests, recommends, develops, coordinates, monitors, and maintains information security policies, procedures and systems, including hardware, firmware and software . Ensures that IS security architecture/designs, plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall IS security . Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents. Investigates and resolves security incidents and recommends enhancements to improve security. Develops techniques and procedures for conducting IS security risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents. What Part Will You Play? This role requires in-depth knowledge and hands on experience with network forensics, disk forensics, host forensics (Windows/Linux/Unix/Mac OSx), log forensics, memory forensics, Cyber Kill Chain/Pre-ATT&CK/ATT&CK, and malware reverse engineering. The preference for this role is specific experience executing Digital Forensics and Incident Response tasks as performed in Cloud Environments, P2PE Deployments, and POS Deployments. It is additionally preferred that the candidate have specific experience building and deploying Digital Forensic solutions for Cloud Environments. Additional preference is also for practitioners with experience performing certified forensic interviews. Experience with a scripting language such as perl, golang, python, or powershell is highly preferred. Experience producing work product such as forensic reporting, IOCs, TTP, or gap analysis is highly preferred. Knowledge of local laws, regulations regarding data handling Bachelor’s Degree Preferred, Industry experience in Cyber Threat Hunting, Digital Forensics, Reverse Engineering, and/or Incident Response GPEN/GXPN/OCSP/GCIH or equivalent What Are We Looking For in This Role? Minimum Qualifications Bachelor's Degree Relevant Experience or Degree in: Bachelor's degree in Computer Science, Info Security, or related field. Or related work experience. Typically Minimum 4 Years Relevant Exp Including network operations or engineering or system administration on Unix, Linux, MAC(Message Authentication Code), or Windows; proven experience working with security operations, intrusion detection systems, Security Incident Even Management systems, and anti-virus collection logs; including knowledge of industry standard security compliance programs (PCI, SOX, GLBA, etc.) Preferred Qualifications Professional certifications CISSP(Certified Information System Security Professional),CISM(Certified Information Security Manager) ,CISA(Certified-Information-Systems-Auditor),GSEC(GIAC Security Essentials) ,Network +,Security + Typically Minimum 4 Years Relevant Exp Knowledge of industry standard security compliance programs (PCI(Payment Card Industry), SOX(Sarbanes-Oxley) , GLBA(Gramm Leach Bliley Act)) What Are Our Desired Skills and Capabilities? Act as a point of escalation for Incident Response, and advanced analytical support to GSOC. Additionally, the new hire will support the digital forensic needs of GPN functional areas to include, but not limited to: Human Resource, Threat Management Center, Fraud, and Corporate Physical Security. Acting as a point of escalation for interpreting network, system, or software behaviors. Serve as a point of escalation for handling Malware Reverse Engineering. It will require digital forensic support to greater GSOC in support of the designated primary need. Keep Senior management, business heads and other stakeholders apprised about the cases handled Experience in collecting and maintaining evidence as required by the organization and regulatory requirements Show more Show less