.we are looking for a lead consultant – fortiguard incident response to work in a dynamic and exciting new position reporting to the director of operations for fortiguard security consulting services.
the analyst will work directly with members of a world-class incident response and forensics team.
our team is comprised of individuals with strong knowledge in malware hunting and analysis, reverse engineering, multiple scripting languages, forensics, and threat actors ttps.
in this very hands-on customer-facing role, the consultant's main objective is to lead and manage the incident response engagements and train/mentor other security consultants.
leveraging your in-depth understanding of the threat actors' tactics, techniques, procedures, and tools as well as our flagship fortiedr tooling, you will need to quickly glean situational awareness to provide guidance to the team members as well as to the client.
in addition, from time to time, the candidate will help to create threat research work products such as blogs and presentations.
to be successful in this role, the candidate must possess strong consulting skills, deep technical skills, and be able to work under tight timelines.responsibilities:lead ir engagements and mentor/training junior analystscontinue to focus on process improvement for the customer-facing incident response servicesconduct host-based analysis and forensic functions on windows, linux, and mac os x systemsreview firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activityleverage our fortiedr platform to conduct investigations to rapidly detect and analyze security threatsperform basic reverse engineering of threat actor's malicious toolsdevelop complete and informative reports and presentations for both executive and technical audiencesavailability during nights/weekends as needed for ir engagementsperform memory forensics and file analysis as neededmonitor underground forums, our fortiguard threat labs, along with other open-source intelligence outlets to maintain proficiency in the latest actor tactics and techniquesrequired skills:bilingual: fluent in english and spanish.
portuguese is a plus.excellent written and verbal communication skillsexperience interfacing with customersexperienced with encase, ftk, x-ways, sift, splunk, redline, volatility, wireshark, tcpdump, and open-source forensic tools a plusa solid understanding of active directory and how to secure it is a plusexperience with at least one scripting language: shell, ruby, perl, python, etc