Cyber Analyst, Digital Forensics Incident Response

Position Overview

• Location Type: Remote
• Employment Type: Full-time
• Salary: Not specified

At-Bay is a fast-growth InsurSec company (Insurance x Cybersecurity) on a mission to bring innovative products to the market that help protect small businesses from digital risks. As an InsurSec provider, we uniquely combine insurance with mission-critical security technologies, threat intelligence, and human expertise, to bridge the critical security capability gap that exists among SMBs in the community. We believe InsurSec is an $80B market opportunity and we are excited to expand our DFIR team in order to help expand our reach and influence in the business and security community, of which we serve 35,000 customers. With At-Bay, our customers experience fewer ransomware attacks. This is just the tip of the iceberg! Click here to learn more about what we're building.

The Role: Cybersecurity Analysts - Digital Forensics and Incident Response (DFIR)

Cybersecurity Analysts focused on Digital Forensics and Incident Response (DFIR) deliver incident investigation and response services to At-Bay insureds via:

• Forensically sound collection, transmission, and storage of digital evidence
• Analysis of digital evidence to identify indicators of compromise and adversary activity
• Development of incident timelines and theories of compromise
• Identification of incident root causes
• Participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)
• Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary
• Development and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessary
• Development and delivery of recommendations to mitigate the risk of future incidents for impacted insureds
• Development and delivery of incident response training and simulations for targeted insureds

Key Skills

• Previous digital forensics and incident response experience
• Strong oral and written communication skills
• Previous hands-on experience performing digital forensics and incident response, including several of the following:
  • Business Email Compromise
  • Ransomware
  • Digital evidence collection and analysis
  • Development and analysis of cyber threat intelligence
  • Leadership of or participation in investigations involving digital evidence
  • Intrusion detection / cyber threat hunting
  • Malware analysis
  • Incident recovery activities such as restoration of data from backups, operation of decryptor tools, etc.
• Previous hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.)

Minimum Requirements

• Bachelor’s degree or equivalent
• Minimum of 2 years of experience in cybersecurity operations, incident response, incident recovery, or another security-related field.

Application Instructions

• Not specified. (Please refer to At-Bay's careers page for application instructions.)