Senior Incident Response Analyst

Coalition Inc; Canada; Remote; CAD 60,000 - 100,000; Full time

Job summary

Join a forward-thinking company as an Incident Response Analyst, where you'll play a crucial role in safeguarding organizations against digital risks. In this dynamic position, you will conduct investigations, triage incidents, and provide strategic recommendations to enhance security postures. The role emphasizes collaboration within a remote-first environment, allowing you to make a tangible impact while working with cutting-edge forensic tools. If you're passionate about cybersecurity and eager to contribute to a mission-driven team that values inclusion and innovation, this opportunity is perfect for you.

Qualifications

• 3-5 years of experience in incident response or related field.
• Strong knowledge of digital forensics and incident remediation.

Responsibilities

• Conduct IR investigations and fulfill consumer requests.
• Communicate effectively with consumers regarding incidents.
• Mentor team members and develop internal guidelines.

Skills

Incident Response

Digital Forensic Analysis

Incident Remediation

Network Forensic Analysis

SOC and EDR

Cloud Incident Response

Critical Thinking

Customer Orientation

Education

Bachelor's degree in digital forensics

Bachelor's degree in cybersecurity

Bachelor's degree in computer science

Tools

Forensic assessment tools

EDR solutions

Network assessment tools

AWS

Azure

GCP

Job description

Coalition is the world's first Active Insurance provider designed to help prevent digital risk before it strikes. Founded in 2017, Coalition combines broad insurance coverage with a digital risk assessment and continuous security monitoring to help organizations protect themselves in today’s hyper-connected world.

Opportunities to make an impact with bold thinking are real - and happening daily.

Responsibilities

• Work under the direction of IR lead and outside counsel to conduct IR investigations
• Fulfill consumer requests and resolve incidents received via e-mail or internal ticketing systems in a timely and detail-oriented manner
• Guide all consumer interactions professionally with a strong emphasis on consumer satisfaction
• Assess and escalate security incidents to appropriate internal teams for additional assistance
• Triage and scope incidents for prospective consumers to identify the DFIR objectives and magnitude of effort involved to satisfy objectives
• Provide strategic, relevant, and achievable recommendations to help advance the security posture of organizations during and after an incident
• Communicate effectively with consumers (executives and IT) on the topics of incident type, remediation, forensics and assessment
• Perform host and network-based forensics across Windows, Mac, and Linux platforms as well as cloud environments
• Deliver high-quality written and verbal reports, recommendations, and findings to key stakeholders including consumers and legal counsel
• Participate in, or work directly on additional projects, assignments, or initiatives as required
• Mentor and coach team members and work effectively as part of a team
• Develop, evaluate and utilize novel methods to hunt for indicators of compromise and perform assessments across large sets of data
• Assist in the development of internal guidelines, playbooks and knowledge base
• Demonstrate industry thought guidance through blog posts and occasional public speaking events

Skills and Qualifications

• 3-5 years of professional experience (2 years directly related to IR or functional area) or equivalent combination of education and experience
• Bachelor's degree in digital forensics, cybersecurity, computer science, information systems or similar field
• Experience working as part of a team in a remote matrixed consulting environment
• Incident Response: conducting or overseeing IR investigations for organizations, addressing opportunistic and targeted threats such as BECs, FTFs, ransomware and APTs
• Digital Forensic Analysis: a background in using different forensic assessment tools in incident response investigations to ascertain the extent and scope of compromise
• Incident Remediation: strong knowledge of opportunistic and targeted attacks and the ability to generate customized strategic and tactical remediation plans for consumers
• Network Forensic Analysis: strong knowledge of networking protocols, network assessment tools, and the ability to assess associated network logs
• SOC and EDR: experience with EDR solutions and leveraging detections and analytics to mitigate threats appropriately
• Knowledge of secure network architecture and strong understanding of networking fundamentals
• Cloud Incident Response: knowledge in AWS, Azure, GCP incident response strategies

Bonus Points

• Excellent critical thinking skills with experience to diagnose and troubleshoot technical issues
• Customer oriented with a strong interest in consumer satisfaction
• Ability to learn new technologies and concepts and comfortable using command-line interfaces
• Experience guiding teams of highly motivated analysts
• Ability to communicate highly technical information to a non-technical audience
• Experience handling high priority scenarios with consumers
• Knowledge in project management
• Foster a positive work environment and attitude
• Flexibility with your work schedule in times of urgent response needs
• Contribute to thought leadership within the DFIR industry
• Relevant certifications such as GCIH, GCIA, GCFA, GCFE, ACE, EnCE, CFCE, CISSP, or similar

Why Coalition?

We’re a remote-first, mission-driven team committed to building a more inclusive culture with people of all different backgrounds. We trust our team members to take responsibility, share ownership, and put in the work to help us in our pursuit to solve digital risk.

Coalition’s exceptional growth stems from its ability to address real-world problems for organizations of all sizes and remain true to our founding values of character, humility, responsibility, purpose, authenticity, and inclusion.

We’re always looking for collaborative, inquisitive individuals to join #OurCoalition.

Accommodations

Coalition is committed to providing reasonable accommodations to qualified individuals with disabilities, including applicants and employees, in accordance with applicable laws and regulations in each country where we operate. Our policy is to support equal opportunity in the hiring process by considering qualified applicants regardless of disability or other protected characteristics, unless providing accommodation would impose an undue hardship or disproportionate burden. If you require accommodation to complete an application, interview, pre-employment testing, or participate in the selection process, please contact us at [e-mail].

To all potential candidates: Coalition primarily does not use third-party recruiting services. Potential candidates will only be contacted by Coalition, Inc. during the recruitment process. You can always verify any opportunity on our official careers page http://www.coalitioninc.com/careers.

To all recruitment agencies: Coalition does not accept unsolicited agency resumes. Do not forward resumes to our email alias, employees, or other physical or virtual organization locations. Coalition is not responsible for any fees related to unsolicited resumes.