Senior Network Forensics & Incident Response Engineer

Verizon; Basking Ridge (NJ); Ibrido; USD 101.000 - 194.000; Tempo pieno

Descrizione del lavoro

Verizon is seeking a Senior Engineer to lead network DFIR across the Defense portfolio, serving as technical lead for digital forensics and incident response during major security events. You will work with cross-functional teams to enhance visibility, automate forensic workflows, and drive proactive threat hunting.

The role requires 4+ years in digital forensics or security engineering, strong SIEM and forensic tool experience, and deep knowledge of network protocols.

Competenze

• Bachelor's degree or four+ years of relevant work experience.
• Four+ years of experience in digital forensics, network security engineering, or incident response.
• Deep experience with SIEM/data analysis platforms (Splunk, ELK).
• Proficiency with forensic acquisition and analysis suites (EnCase, FTK, Volatility, X-Ways, SANS SIFT, KAPE).
• Expert knowledge of core network protocols (TCP/IP, BGP, OSPF, DNS, TLS, HTTP/S).

Mansioni

• Network & Digital Forensics: collect, preserve, analyze evidence across diverse infrastructure.
• Incident Response Leadership: lead investigations during major security incidents.
• Network Telemetry Analysis: inspect PCAP, NetFlow/IPFIX, logs to trace adversary movement.
• Memory & Endpoint Forensics: analyze memory and endpoint artifacts during intrusions.
• YARA & Signature Engineering: create and maintain custom rules for artifacts.
• Threat Hunting & Evidence Extraction: extract IOCs and convert findings to detections.
• Automation & Forensic Tooling: script artifact collection and triage workflows.

Conoscenze

SIEM data analysis

Network security

Forensic investigations

Formazione

Bachelor's degree or 4+ years experience

Strumenti

EnCase

FTK

Volatility

X-Ways

SANS SIFT

KAPE

Descrizione del lavoro

Verizon is seeking a Senior Engineer to lead network DFIR across the Defense portfolio, serving as technical lead for digital forensics and incident response during major security events. You will work with cross-functional teams to enhance visibility, automate forensic workflows, and drive proactive threat hunting.

The role requires 4+ years in digital forensics or security engineering, strong SIEM and forensic tool experience, and deep knowledge of network protocols.