Security Engineer - Incident Response and Digital Forensics · 2020-05-13 · Security Engineer –...

SecurityEngineer–IncidentResponseandDigitalForensics

SpearTip-MissionStatementBlendcutting-edgetechnologies,uniqueskillsetsandprovenmilitarycybercounterintelligencestrategies,SpearTippartnerswithourPartnerstoprotectshareholdervalue,shieldcorporatereputationsandenhancelong-termprofits.CoreValues

PositionDescriptionThispositionwillberesponsibleforprotectingcompanyassetsincludinginformationsystems,networks,devices,anddatafromthreats,suchassecuritybreaches,computervirusesorattacksbycyber-criminals.AkeyfocusonthispositionisonSpearTip’sIncidentResponseandDigitalForensicsengagements.CharacteristicsRequirementsNotallofthefollowingrequirementsareexpectedforeverypotentialcandidate.SpearTipconsidersboththecharacterofpersonandtheirexperiencewhenmakinghiringdecisions.Forastrongcandidate,SpearTipiswillingtooffertraining(internalandexternal)tofillnecessaryknowledgegaps.

PersonalAttributes: Creativebrainstormerwillingtobuildsolutionscollaborativelytosolvecomplexcybersecurityproblems

Self-motivated,decisivedecisionmakerwiththeabilitytotakeownershipandwillingnesstobeaccountable

Willingtostickwithdifficultproblemstoconsistentlyproducethebestsolutionforourpartnersandwillingtochampionnewtechnologyanddifferentapproaches

Desirestobeimmersedinatrainingculturetobothdevelopothersandimproveself

EducationalandExperience:

ComputerScience,Cybersecurity,orInformationSystemsBachelor’sDegreeorequivalentprofessionalexperienceinadevelopmentorIToperationsrole

Oneintermediatecybersecuritycertification–desiredbutnotrequired(e.g.GCIH,GCFA,CHFI,CySA+,etc.)

Proficientinincidenthandlingprocedures(NIST.SP.800-61r2) Experienceorknowledgeofwithdigitalforensictools(forexample,FTK,EnCase,MagnetAxiom) Experienceorknowledgeofmemoryforensictools(forexample,Volatility) Experienceorknowledgeofenterprisedetectionandresponsetools(CarbonBlack,CrowdStrike,SentinelOne,Cylance,etc.)

ExperienceorknowledgeofSIEMtools(SplunkorLogRhythm) ProficientinWindowsandLinuxoperatingsystems Proficientincomputernetworkingconcepts

Responsibilities: Responsibleforleadingorparticipatinginonsiteincidentresponseanddigitalengagements Maintainchainofcustodyandproperevidencehandlingproceduresduringengagements Whenrequiredbythenatureoftheengagement,actasaconsultingorexpertcourtwitness Datacollection,analysis,andreportwriting-collectanddocumentthetimelineofevents,collect,analyze,andvalidatefindings,andprovide“bestpractice”recommendationstotheclient;withtheunderstandingthatyourrecommendationshavesignificantimpacttoclientoperations

Assistintriageandvalidationofalertsfromenterprisedetectionandresponsetools MaintainandcultivateworkingknowledgeofAxiom,ShadowSpear,Paladin,SpearPortal,FTK,andadditionalDigitalForensicsandManagedDetectionandResponsetools

Problemsolve;independentlyandinateamenvironment Exercisingindependentjudgmentanddiscretion,communicate/coordinatewithclientsregardingalerts,projectupdates,andprojectstatusthroughoutanengagement

Responsibleforthetimelycompletionofengagementsandappropriatelycommunicateprojectstatusandworkloadtocompanyleadershipthroughtherequiredchannels

Maintaincurrentcertifications(asapplicable) Whenappropriate,problemsolveindependentlyandinateamenvironment Beavailableforshort-termperiodictraveltosupportregional,national,andinternationalclients BewillingtoworktowardsnewcertificationswithpropertrainingatSpearTip’sexpenseatthediscretionofcompanyleadership

AttendandactivelyparticipateintheOperationsL10MeetingsandEOSprocess Responsibilitiessubjecttochangeatthediscretionofcompanyleadership ProjectManagement-Exercisingindependentjudgmentanddiscretion,communicate/coordinatewithclientsregardingalerts,projectupdates,andprojectstatusthroughoutanengagement

Benefits:

HealthInsuranceCoverage–100%coverageplan,currentemployeecontributionis$0 Dental&VisionCoverage–currentemployeecontributionis$0 Participationin401(K)Plan,employermatchof100%fortheinitial3%ofcontributionand50%fornext2%ofcontributedfunds,immediatevesting

SpearTipapprovedholidays(currently8approvedholidays) Personalleavedays

Security Engineer - Incident Response and Digital Forensics · 2020-05-13 · Security Engineer –...

Documents

Transcript of Security Engineer - Incident Response and Digital Forensics · 2020-05-13 · Security Engineer –...

Incident response and forensics - Flexential · Incident response and forensics To learn more about Flexential services, contact us at 877.448.9378 or sales@flexential.com • 24/7

IBM QRadar Incident Forensics: QRadar Incident Forensics ...€¦ · Scheduling actions for QRadar Incident Forensics hosts ... Assistance 101 ( ... systems and information through

IBM QRadar Incident Forensics: QRadar Incident Forensics User … · 2020-03-05 · Introduction to using IBM QRadar Incident Forensics. This guide contains information about investigating

Digital Forensics as a Service: DFIR in the Cloud · Traditional vs Cloud Forensics Processes Traditional Forensics Cloud Forensics Identification Identification of an event or incident

Incident Response: Live Forensics and Investigationsscitechconnect.elsevier.com/wp-content/uploads/2013/09/Incident... · Incident Response: Live Forensics and Investigations Solutions

The SANS Survey of Digital Forensics and Incident Response

Digital forensics and incident response€¦ · Digital forensics is often part of an incident responder’sjob Law enforcements Computer Emergency Response Teams (CERTs) In Norway:

Incident Response Incident Response Process Forensics.

IBM Security QRadar Incident Forensics...2 IBMSoftware Data Sheet Investigations that reach beyond pure packet captures QRadar Incident Forensics seamlessly integrates with IBM QRadar

Tip of the SpearTip of the Spear - SOCOM

Digital Forensics and Incident Response

Memory forensics and incident response

Statistical Security Incident Forensics against Data ...Statistical Security Incident Forensics against Data Falsiﬁcation in Smart Grid Advanced Metering Infrastructure Shameek Bhattacharjee1,

SANS Digital Forensics and Incident Response Poster 2012

Incident Response and Digital Forensics – Denver Chapter of ISACA

Chapter 1 Computer Forensics and Incident Response …Chapter 1 Computer Forensics and Incident Response Essentials In This Chapter Catching the criminal: the basics of computer forensics

Distributed forensics and incident response in the …research.google.com/pubs/archive/37237.pdf · Distributed forensics and incident response in the enterprise M.I. Cohen*, D. Bilby,

Windows Forensics And Incident Recovery Conv

Windows Forensics - Exercises - JKU · Michael Sonntag, Christian Praher Windows Forensics 3 Environment More incident response than forensics No clear separation between …

Incident Management ITU Pillars & Qatar Case Study...• Incident Coordination & Reporting • Incident Analysis & Forensics • Outreach, Awareness, & Training • Critical Infrastructure