Senior Incident Response Investigator

• Lead incident response investigations for client organisations and deliver high-quality reports with clear findings and guidance
• Maintain target utilisation on chargeable client projects
• Produce technical content (research, blogs, thought leadership) to a publishable standard
• Support Incident Readiness work, including tabletop exercises, client training and playbook creation, when not on live investigations
• Mentor junior team members and advise on current industry trends
• Support delivery and growth of the wider practice, If you’re DV cleared and ready to lead investigations that matter, apply today or message Rob Wall at FR Secure for a confidential conversation.

Essential

• Chartered Cyber Security Professional (ChCSP) status
• Experience investigating targeted attacks across large enterprise networks
• Strong knowledge of client-server infrastructure, security architecture, logging and alerting across multiple operating systems
• Network forensics, including packet-level analysis
• File-system analysis and extraction of common disk-based indicators of compromise
• Windows, Linux and/or macOS internals, with knowledge of key system artefacts for each
• Memory analysis
• Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise framework
• Understanding of threat actor motivations and methods, and how systems are exploited
• Excellent communication, from technical practitioners to executive boards

Desirable

• Malware analysis
• Scripting in Python, Ruby, PowerShell or Bash
• Experience with common cloud technologies

Our client is a leading cyber security services provider. They are hiring a Senior Incident Response Investigator to lead investigations into targeted attacks for UK defence industry clients and to help shape the growth of their incident response practice., As an industry leading, nationwide Marketing, Digital, Analytics, IT and Design recruitment agency, we are continually receiving new assignments to work on, so keep a close eye on our website, Facebook, LinkedIn and Twitter pages for a full list of current permanent and interim opportunities as well as marketplace news and fun stuff.