IR and Malware Analyst

Job Description

Advanced information and cybersecurity analyst to investigate incidents and conduct threat hunting at any of the company’s worldwide clients, while using a wide variety of techniques and cutting-edge tools for forensic investigations.
With an emphasis on responding to escalations for the monitoring teams.

Responsibilities

Conducting cyber investigations regarding suspicious files, phishing emails, logs, network traffic, file systems, etc.
Helping worldwide customers with incident handling and cybersecurity-related issues
Conducting a full digital forensics investigation process regarding cyber incidents with emphasis on identifying the attack vectors, understanding the attack methods and their outcomes, scoping the incident, eradicating the threats that lead to the incidents, and writing incident lessons learned recommendations and reports
Creating and updating IR and Digital Forensics methodologies, procedures, flight guides, and workflows
Conducting threat hunting on the client’s environment

Requirements 

2-3 years of experience in incident handling and digital forensics, basic malware analysis and sandboxing, volatile memory analysis – must
Deep understanding of operating systems artifacts (Windows, Linux, and Mac) and filesystems artifacts – must
Good knowledge regarding IOCs and IOCs standards – must
Good knowledge on most common network protocols – advantage
Experience with tools and scripts development in the DFIR field – advantage
Experience with cyber incident hunting – advantage
Fully fluent in English – must