Remote Incident Response Specialist

Pondurance; McLean (VA); On-site; USD 90,000 - 100,000; Full time

Benefits offered by this job

Remote work

Office access in McLean

Competitive benefits

Job summary

Pondurance is seeking an Incident Response Consultant to guide clients through the IR lifecycle, contain threats, and eradicate malicious activity. You will investigate intrusions, analyze TTPs, and strengthen detections across endpoints, networks, and cloud environments.

The role emphasizes leadership during investigations, clear client communications, and off-hours support as needed, with a remote-first setup and McLean, VA access for in-person collaboration.

Qualifications

• 1–3 years in forensic/IR
• Experience with host- and/or network-based forensics
• Malware analysis and advanced cyber threat investigations
• Experience investigating ransomware incidents
• Led Business Email Compromise investigations in Microsoft 365/Exchange/Google Workspace
• Strong analytical and communication skills

Responsibilities

• Support IR lifecycle from triage to containment
• Perform forensic analysis and malware assessment
• Identify attack vectors and attacker TTPs
• Provide written/verbal client reports
• Provide after-hours support as needed
• Contribute to IR process documentation
• Collaborate with SOC to improve detection capabilities

Skills

Incident response

Forensic analysis

Malware analysis

Ransomware investigations

BEC investigations

written/verbal communication

Tools

PowerShell

Python

Bash

Microsoft 365

Azure/Entra ID

Defender

Job description

Pondurance is seeking an Incident Response Consultant to guide clients through the IR lifecycle, contain threats, and eradicate malicious activity. You will investigate intrusions, analyze TTPs, and strengthen detections across endpoints, networks, and cloud environments.

The role emphasizes leadership during investigations, clear client communications, and off-hours support as needed, with a remote-first setup and McLean, VA access for in-person collaboration.