Incident Response & Forensics Specialist

This is a remote position.

Incident Response & Forensics – Remote, In Proximity to NYC Metro Region Required

Lynx client in NYC is seeking a highly technical Incident Response & Forensics Specialist. This position is a part of the IT Threat Intelligence group within the Cyber Security Operations Center and will be expected to provide direct support to the 24/7 Cyber Security Monitoring group as needed.

The responsibilities include, but are not limited to, the following:

• Serving as a primary point of contact for MTA CSOC & MSSP Cybersecurity Incident escalations
  
• Interfaces directly with vendors & third parties for notified/observed compromises
  
• Forensics on memory, disks, and logs
  
• Malware analysis (dynamic & static)
  
• Involvement in full incident response lifecycle
  
• Processes evidence in accordance with Chain of Custody
  
• Creates Incident reports to brief to executive management
  
• Provide recommendations to prevent similar incidents
  
• Assist the Threat Intelligence group in other functions including
  
• Threat Intelligence / Threat Hunting
  
• Threat Readiness
  
• Cyber Content Engineering & Automation
  
• Excellent communication skills
  
• Strong experience with digital forensic tools
  
• Strong understanding and analysis of code such as Powershell, PERL, Python
  
• Cybersecurity certifications (preferred)
  
• Experience with OT & PCI technologies (preferred)
  
• 
  

Requirements

Bachelor's degree in Computer Science, Information Services, or IT Security related field –Or- A satisfactory equivalent with at least 3 years of IT-Security experience.

• Minimum of 3 years of experience Tier 1 & 2 support for cyber security operation center.

• Minimum of 2 years’ experience with performing incident response functions & investigations

Candidate must possess adequate skills with multiple programming languages and must demonstrate that they can reverse engineer malware code. The Candidate must have experience in Cyber Security Incident Response. Must be proficient with UNIX, Windows, OSX, and Mobile Devices. Candidate must be proficient with the administration of Office365 and all its security features.​

Benefits