Incident Response Consultant - DI

Description

Role Summary

As an Incident Responder you are expected to investigate computer related crimes and cyber security incidents within an organization. You are expected to validate the incidents, identify the root cause and contain and eradicate the incidents and its traits.

You are expected to be proficient in wide range of computer investigation and forensic tools.

You are an Engineering graduate with 4+ years of experience in performing incident detection, response, remediation and forensics. You possess SANS GCIH, GCFA or Advanced Incident Responder certification

Job Duties List
The main responsibility of the Incident Responder is to assess logs, make searches for correlating events to create time series chart, identify root cause and use computer forensic tools to examine and analyze electronic media in suspected computer hacking cases or insider threats or malware incidents.

Duties includes

• Provide a rapid initial response to any IT Security threats, incidents or cyber-attacks on your organization
• Provide support in the detection, response, mitigation, and reporting of cyber threats affecting organizational  networks
• Maintain an understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security operations
• Analyze and report cyber threats as well as assist in deterring, identifying, monitoring, investigating and analyzing computer network intrusions
• Additional duties may include providing intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments
• Monitor traffic for any unusual activity or unauthorized access attempts to identify indicator of compromise in the network and traits of intrusions
• May need to analyze malwares, threat advisories, vendor security bulletins, threat intelligence information etc. to validate the actionable.

Requirements

• Engineering graduate with 4+ years of incident response and forensics experience.
• Practical experience using computer operating systems such as MS Windows, UNIX and Linux
• Detail analytical capabilities to identify
• Defense evasion techniques - Malware defense evasion and detection
• Understanding core Windows processes
• Persistence - Malware persistence detection and analysis
• Finding and Analyzing Malicious WMI Event Consumers
• A problem-solving mind-set
• Working as part of a team, you need to be a good team player
• The ability to react quickly and efficiently under pressure
• Good communication skills as you will be reporting regularly to management and other stakeholders
• Knowledge and understanding of network protocols, network devices, multiple operating systems, and secure architectures
• Technical Incident Reporter Certification like GCIH, GCIA, GNFA

Inclusive Diversity

A&M’s entrepreneurial culture celebrates independent thinkers and doers who can positively impact our clients and shape our industry. The collaborative environment and engaging work—guided by A&M’s core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity—are the main reasons our people love working at A&M. Inclusive Diversity means we embrace diversity, and we foster inclusiveness, encouraging everyone to bring their whole self to work each day. It runs through how we recruit, develop employees, conduct business, support clients, and partner with vendors. It is the A&M way.

Equal Opportunity Employer

It is Alvarez & Marsal’s practice to provide and promote equal opportunity in employment, compensation, and other terms and conditions of employment without discrimination because of race, color, creed, religion, national origin, ancestry, citizenship status, sex or gender, gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, family medical history, genetic information or other protected medical condition, political affiliation, or any other characteristic protected by and in accordance with applicable laws. Employees and Applicants can find A&M policy statements and additional information by region here.

Unsolicited Resumes from Third-Party Recruiters

Please note that as per A&M policy, we do not accept unsolicited resumes from third-party recruiters unless such recruiters are engaged to provide candidates for a specified opening. Any employment agency, person or entity that submits an unsolicited resume does so with the understanding that A&M will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.