This is a remote position.
CyberClan is a boutique cybersecurity with operations in the US, the UK and, Canada. The company provides 24/7/365 incident response services across North America and the United Kingdom, including proactive cybersecurity services, red team & blue team exercise, threat intelligence platforms, dark web investigation, cyber extortion, ransomware negotiation, information technology restoration, and next-generation managed cybersecurity services. Our team has worked with federal, provincial, and government agencies. We are seeking an energetic and innovative DFIR analyst to join our team!
The Digital Forensic Incident Response Analyst is a highly motivated self-starter with a passion for problem solving through challenging and high-stakes situations. This exciting role presents the opportunity to dive deep into host systems and track down attacker activity and indicators of compromise.
This job is ideal for an individual that is dependable, detail-oriented, able to work independently under pressure. The ideal person must enjoy taking on challenges, enjoy interacting with clients, and working on multiple cases.
Essential Functions Include:
- Analyzing event and system logs, performing digital forensic and malware analysis/triage, and analysis on related incident response data
- Creating timelines and relationships between fractional data through deductive reasoning
- Liaising with client operations and technical teams to implement remediation plans post incident
- Offering consulting and providing regular updates for project managers and client POCs
- Developing and generating comprehensive reports for both technical and executive level audiences
Requirements
The Ideal Candidate Has:
· 1-2 years’ experience in a technical or IT operations environment
· Ability to comprehend incident response processes and best practices
· Familiar with intrusion detection systems such as snort, tcpdump, and Wireshark
· Understanding of various attack vectors, threat tactics, and attacker techniques
· Knowledgeable on network architecture and security infrastructure
· Experience with Windows operating systems and command line tools
· Understanding of ports, sessions, DNS, and HTTP
Nice to Have:
· Bachelor’s degree in Computer Science or related field
· Experience working on mission critical security operations team
· Excellent written and communication skills
· A strong desire to be challenged and an openness to learn continuously
· Knowledge of webshells, DNS servers, vs HTTP proxy
· OSINT skills
Job Type
Full-time/Exempt
Location
100% Remote
%of Travel Required
0-5%
Physical Requirements
Prolonged periods of sitting at a desk and working on a computer.
Benefits
We offer health benefits for all full-time employees, PTO, paid holidays, STD, LTD, Life Insurance, Supplemental Benefits, Legal Assistance, and more.