CERT Lead: Cyber Incident Response & Forensics

SmartRecruiters, Inc.; New York (NY); On-site; USD 75,000 - 180,000; Full time

Job summary

City of New York’s Office of Technology and Innovation seeks a CERT Lead to guide cyber incident response for City agencies. You will oversee malware analysis, forensics, and threat hunts, acting as the top technical escalation for high-profile incidents across enterprise environments.

Lead six DFIR specialists, mentor staff, and collaborate with internal Cyber Threat Intelligence and data science teams to evolve detection, investigation, response, and remediation capabilities.

Qualifications

• Bachelor's degree and four years of related experience.
• Experience in DFIR, malware analysis, and memory forensics.
• Ability to lead and mentor a six-person DFIR team.
• Experience with cloud environments (AWS/Azure/GCP).

Responsibilities

• Assist NYC agencies in improving cyber incident response.
• Serve as escalation point for high-profile incidents, ensuring 24x7 readiness.
• Prioritize incident response activities and coordinate across City departments.
• Lead, mentor, and manage CERT team personnel consisting of six DFIR specialists.
• Investigate cybersecurity incidents through log, file, and malware analysis.
• Perform memory, network, and disk forensics.
• Lead investigations and incident response across enterprise cloud environments (AWS, Azure, GCP).
• Devise remediation strategies and assist agencies in containing and eradicating incidents.
• Develop post-incident action plans to improve mean time to recover.
• Identify cyber threat campaigns and deploy countermeasures.
• Design and participate in cyber tabletop exercises with City departments.

Skills

Digital Forensics

Incident Response

Leadership

Threat Intelligence

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Job description

City of New York’s Office of Technology and Innovation seeks a CERT Lead to guide cyber incident response for City agencies. You will oversee malware analysis, forensics, and threat hunts, acting as the top technical escalation for high-profile incidents across enterprise environments.

Lead six DFIR specialists, mentor staff, and collaborate with internal Cyber Threat Intelligence and data science teams to evolve detection, investigation, response, and remediation capabilities.