Responsibilities

The DFIR Engagement Manager will engage on behalf of At-bay Security in incident response tasks, interacting with legal counsel, client executives, and technical teams, utilizing standard tools and methodologies to collect forensic artifacts and images. They will perform Windows/Unix/Linux forensics and triage, and network forensics to assess compromise and investigations, apply mitigation strategies, analyze triage collections/artifacts for indicators of compromise, review logs from host systems and appliances, collect forensic disk and memory images, and conduct forensic analysis of physical systems, virtual machines, and network data. The role also involves understanding of an incident lifecycle and cyber-kill-chain, conducting limited threat research based on IOCs, collaborating with teams, communicating effectively with client managers and executives, and writing detailed reports summarizing findings clearly and concisely.