Remote Senior Incident Response Lead

Pondurance; United States; Remote; USD 110,000 - 136,000; Full time

Job summary

Pondurance is seeking an experienced Incident Response professional to lead technical investigations, triage high-stakes security events, and communicate findings to clients. You will develop custom scripts and tools to enhance IR processes and provide actionable guidance during active incidents.

The role is remote and US-based, with preference for candidates near Washington, DC for occasional office needs. Strong collaboration with clients and executive stakeholders is essential.

Qualifications

• 4+ years of experience in a forensic and incident response role.
• Certifications like GCIH/GCFA/GREM preferred.
• Experience triaging ransomware investigations and determining remediation.
• Experience in a technical role for a consulting company.

Responsibilities

• Conduct forensic host, network, and application technical investigations
• Triage active high-stakes security events and apply security controls
• Codify attacker tools, TTPs into indicators of compromise
• Develop custom scripts or methodologies to enhance IR processes
• Create comprehensive reports of forensic findings and IR activities
• Communicate findings to client stakeholders including executives
• Provide immediate actionable 0-day cybersecurity advice to mitigate ongoing attacks
• Assist with scoping new engagements across the lifecycle

Skills

Incident response

Communication under pressure

Scripting/Programming

Education

GIAC certifications (GCIH/GCFA/GREM)

Other certifications (MCFE, EnCE)

Tools

SentinelOne

BlackBerry PROTECT

Carbon Black

CrowdStrike

FTK

AXIOM

EnCase

Job description

Pondurance is seeking an experienced Incident Response professional to lead technical investigations, triage high-stakes security events, and communicate findings to clients. You will develop custom scripts and tools to enhance IR processes and provide actionable guidance during active incidents.

The role is remote and US-based, with preference for candidates near Washington, DC for occasional office needs. Strong collaboration with clients and executive stakeholders is essential.