Senior Incident Response Lead & Forensics Expert

Pondurance; McLean (VA); Hybrid; USD 110,000 - 136,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) plan

Time off: PTO, sick, holiday, parental

Job summary

Pondurance is seeking an Incident Response professional to lead technical analyses of investigations, support the IR lifecycle, and communicate findings to clients. The role requires effective off-hours support and the ability to operate in high-stress IR situations.

The position is hybrid, located in the McLean, VA area, with about 20% in-office work for device collection and related tasks. Base compensation ranges from $110,000 to $136,000, with potential bonus and benefits.

Qualifications

• 4+ years of experience in a forensic and incident response role.
• Demonstrated ability to triage and detect events and respond to incidents.
• Experience with ransomware forensic investigations is a plus.
• Experience in a technical role for a consulting company is preferred.

Responsibilities

• Conduct forensic host, network, and application investigations.
• Triage high-stakes security events and apply security controls to detect and remediate threats.
• Codify attacker tools, TTPs into IOCs for current and future investigations.
• Develop scripts, tools, or methodologies to enhance IR processes.
• Create comprehensive reports of forensic findings for technical and executive audiences.
• Communicate findings and strategy to client stakeholders including executives and legal counsel.
• Provide immediate 0-day cybersecurity advice to mitigate ongoing attacks.
• Assist in scoping new engagements across the full lifecycle from discovery to remediation.

Skills

IR experience

Windows forensics

Unix forensics

Network analysis

Scripting/Programming

EDR tools

Malware analysis

Communication skills

Education

GIAC certifications

Tools

SentinelOne

BlackBerry PROTECT

Carbon Black

CrowdStrike

FTK

AXIOM

EnCase

Job description

Pondurance is seeking an Incident Response professional to lead technical analyses of investigations, support the IR lifecycle, and communicate findings to clients. The role requires effective off-hours support and the ability to operate in high-stress IR situations.

The position is hybrid, located in the McLean, VA area, with about 20% in-office work for device collection and related tasks. Base compensation ranges from $110,000 to $136,000, with potential bonus and benefits.