Digital Forensics Incident Response Consultant

You want more out of a career. A place to share your ideas freely - even if they're daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love - driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together - lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the #VTeamLife.

What you'll be doing...

• You will be part of Verizon's Professional Services (PS) team by performing incident response and digital forensic activities for PS engagements.

• Delivering and executing PS engagements. Primarily focused on helping customers manage and investigate cybersecurity incidents by performing digital forensics and incident response. Relevant job responsibilities include:

• Log review to include structured (CSV, TSV, JSON) and unstructured (syslog) data

• Windows, Linux, Mac, and mobile forensics

• Investigations using SIEM solutions such as Splunk, Sentinel, ELK, etc.

• Threat hunting using EDR solutions such as CrowdStrike, SentinelOne, Trend Micro, etc

• Microsoft cloud skills such as M365 and/or Azure

• AWS cloud skills such as GuardDuty, CloudWatch, IAM, WAF, etc.

• Conducting global or onsite security assessment, possibly working in customer's office/environment.

• Attending periodical meetings to discuss ongoing security initiatives and their progress.

• Helping customers work on their security initiatives by advising, and working on initiatives alongside the customer.

What we're looking for...

Someone interested in joining the Verizon Threat Research Advisory Center (VTRAC) which consults multinational corporations and government agencies regarding their cybersecurity posture, as well as advising executive leadership teams, advisory boards, and boards of directors through cybersecurity incidents and strategic planning. As a member of this world-class team of consultants located across the Americas, EMEA, and APAC you will be a part of a group that leads thousands of cybersecurity investigations and other proactive engagements while annually authoring the industry-leading Data Breach Investigations Report and Data Breach Digest going back to their inception in 2008. We are looking for someone who is a motivated individual and who is comfortable working in a team or as an individual.

You'll need to have:

• Bachelor's degree or four or more years of work experience.

• Four or more years of relevant work experience.

• Relevant work experience in: a cybersecurity capacity, responding to cybersecurity incidents, triaging, and/or investigating cybersecurity incidents

Even better if you have one or more of the following:

• One or more technical certifications in areas such as incident handling, forensic analysis, reverse malware engineering or forensic tool-specific training.

• Experience working in an enterprise environment.

• Experience working with clients to proactively provide cybersecurity
  services (tabletops, incident response training, etc.)

• Experience in network infrastructure, communication protocols, and network log analysis.

• Experience in packet capture and TCP/UDP traffic flow analysis.

• Knowledge of computer exploitation methodologies.

• Current information security solutions and technologies, including network and host based products

• Experience in using forensic tools such as EnCase, FTK, Sleuth Kit, Volatility, Axiom, Cellebrite, Black Light, X-Ways, or similar.

• Experience in SIEM, EDR, IDS, and DLP technologies, memory and volatile data analysis.

• Knowledge of enterprise cloud infrastructure (AWS, G-Suite, O365, Azure, etc.)

• Knowledge of Command line tooling (grep, sed, awk, powershell, etc.)

• Ability to function in a dynamic environment, managing multiple priorities and deadlines.

• Ability to make recommendations to remediate complex security threats.

• Ability to synthesize data from multiple sources and present concise, relevant information to non-technical audiences.

• Excellent communication skills with the ability to present to a variety of audiences.

• Ability to set and manage competing expectations and priorities with technical and senior stake-holders.

• Strong analytic, qualitative and quantitative reasoning skills.

• Strong creative problem-solving abilities and ability to share knowledge with colleagues.

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don't meet every "even better" qualification listed above.

Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to veteran status, disability or other legally protected characteristics.