- Contribute to client-facing incident response engagements throughout the incident response lifecycle, from detection to recovery.
- Conduct advanced forensic analysis to identify the scope and impact of security incidents, including malware analysis and reverse engineering when necessary.
- Lead forensic investigations for small to medium incidents, such as Business Email Compromises and ransomware engagements.
- Identify and explain attack vectors, threat tactics, and attacker techniques to guide mitigation and prevention efforts.
- Communicate forensic findings to technical and non-technical stakeholders.
- Provide supporting evidence for written reports documenting incident findings and analysis.
- Collaborate with internal teams, external partners, and clients to refine and document incident response processes and best practices.
- Research forensic tools, techniques, and methodologies, and contribute to internal processes and organizational initiatives.
- Mentor less experienced team members and share expertise.
- Provide rotational after-hours and weekend support for critical incidents.