Senior Digital Forensics Incident Response Consultant, Data & Technology, Cybersecurity (Remote)

$85,000 - $200,000/Yr

Ankura

Full-time - Mid Level

Remote

1,001-5,000 employees

Professional, Scientific, and Technical Services

About the position

Ankura's Cybersecurity Practice is a dynamic and rapidly expanding segment of our Data & Technology business, dedicated to providing comprehensive information security and privacy solutions tailored to the unique needs of our clients across various industries. Our team is composed of seasoned professionals, including former members of the FBI and CIA, who bring a wealth of experience in cybersecurity. We focus on proactive preparedness, incident response, cyber resilience, and managed advisory services, ensuring that our clients are equipped to handle any cybersecurity challenges they may face. In this role, you will be integral to our efforts in addressing critical information security challenges. You will participate in security incident investigations that involve computer crimes, requiring a deep understanding of log analysis, forensic analysis, and malware capabilities. Your responsibilities will include collecting and analyzing data from intrusion detection systems, firewall logs, and network traffic logs to determine if unauthorized access or data exfiltration has occurred. You will also conduct forensic analyses to identify malware presence and its actions, working in both Linux and Windows environments. Your role will involve providing insights into client communications, both written and oral, ensuring that senior management and C-suite clients are informed about the analyses performed. This position is remote, allowing you to work from anywhere in the United States while contributing to a team that is committed to excellence and innovation in cybersecurity.

Responsibilities

• Participate in security incident investigations that involve computer crimes and require log, forensic and malware analysis.
• Collect and analyze intrusion detection system alerts, firewall logs, network traffic logs and host system logs to evaluate whether unauthorized access or information ex-filtration occurred.
• Perform forensic analyses to identify the presence of any malware, malware capabilities/actions and what actions the malware took.
• Conduct security investigations in Linux and/or Windows environments.
• Provide input into client communications, both written and oral, related to analyses performed for senior level review.

Requirements

• Bachelor's or Master's Degree in Computer Science/Cyber Security/MSIS or equivalent work experience.
• Approximately 5+ years of experience working in the Incident Response space.
• Understanding of how to communicate effectively and concisely with legal counsel, high level management, and C-suite clients.
• Ability to approach projects both from a long-range and immediate view.
• Experience working with non-Windows programs (such as Linux, Unix, Mac).
• Scripting/programming experience (specifically Python, C#, VBA, or Shell).
• Experience working on projects in an investigatory capacity - either law enforcement or incident response.