Description
S-RM is a global intelligence and cyber security consultancy that has been helping clients solve information security challenges since 2005. We are looking for a Senior Associate, Incident Response to join our Cyber Security division.
The role involves deploying incident response expertise in a senior delivery role across our incident response services. You will work across the full lifecycle of security incidents to help clients respond and recover. This includes:
- Supporting technical incident response from first contact through to closure
- Overseeing host- and network-based incident response investigations
- Technical evidence collection from clients' environments to prepare for forensic investigations
- Providing containment and recovery advice to clients during and after cyber incidents
- Developing and sharing domain expertise
- Occasionally providing overarching project management support
- Participating in an on-call rotation with the rest of the global cyber team to provide 24x7x365 client incident coverage
As a senior technical lead, you will have the opportunity to help lead the rest of the APAC incident response team, act as an escalation point for more junior colleagues, and help ensure work produced by the team meets quality standards.
We offer flexible working practices, including the ability to work remotely, and a range of benefits, including 20 days paid holiday each year, pension scheme, life insurance, company-paid private medical and dental insurance, and employee assistance programme.
Requirements:
- Direct experience working in an Incident Response or Digital Forensics team is strongly preferred
- Strong domain knowledge across computer systems and networks
- Experience conducting forensic investigations, particularly relating to Windows systems
- Demonstrable understanding of core incident response workstreams
- Comfortable using scripting to solve cyber security problems
- Critical and investigative mindset
- Strong communication skills
- Knowledge of cyber threat actors and their tactics, techniques, and procedures
Preferred skills:
- Experience conducting investigations into Linux and MacOS systems
- Holding certifications such as GCFE, GCFA, GCIH, GNFA, EnCE, CFSR, CISSP, GREM, CCNA, MCFE, OSCP, Network+ and Security+
- Working proficiency in another language