Staff SOC Engineer (DFIR & Hunt)

View full description

Requirements:

• 10+ years minimum of experience in leading incident response activities.
• Ability to identify unusual resource usage patterns.
• Hands-on experience with dead-disk and live digital forensics.
• Data analysis skills with relational databases and query languages.
• Familiarity with static and dynamic malware analysis.
• A high degree of curiosity and passion for security.
• Clear written and verbal communication skills.
• Proven track record of improving operational security.
• Five or more years of experience in forensics and incident response protocols.
• Ability to conduct vulnerability analysis and mitigation planning.
• Ability to perform threat intelligence analysis.
• Proven coding skills for developing automations and tools.

Responsibilities:

• Establish an understanding of DigitalOcean’s production environment.
• Lead live intrusions and incident response investigations.
• Collect digital artifacts for analysis using digital forensics methodologies.
• Use network traffic analysis techniques to identify compromised systems.
• Identify trends in malicious activity and inform leadership.
• Act as point of contact for security incidents.
• Build tools to identify and automate responses to malicious activity.
• Build relationships across technical teams to enhance security.
• Engage in R&D for developing forensic tools and techniques.
• Implement technical recommendations for incident response capabilities.
• Provide feedback and advice to juniors and peers.