Backend Engineer, Coalition

• One general purpose programming language and general scripting experience
• Working knowledge of PowerShell and Windows OS fundamentals
• Unix command line knowledge (bash, grep, awk)
• Knowledge of Cloud Provider ecosystems and their services
• DevOps fundamentals including infrastructure-as-code and deployment automation (e.g., terraform, ansible)
• Knowledge of internet technologies and architecture design
• Organizational and Research skills – the work often involves discovering requirements

Desirable

• This engineer position will work closely with the CIR team to maintain, refine, update, and develop new tools and capabilities
• These efforts will make the team more efficient, and allow them to deliver more effective DFIR services to clients in crisis
• Things you might do in the first 6 months of this role: Develop and improve devops tools that enable CIR to rapidly and consistently deploy infrastructure in AWS and Azure using Terraform, Ansible, and similar capabilities
• Create forensic automation tooling to collect and analyze relevant artifacts at scale
• Improve log collection and analysis tools to process SaaS telemetry and configuration details for business email compromise investigations
• Build and maintain web applications to collect structured investigative data
• Integrate platforms across the investigative lifecycle using APIs, CRM, data pipelines (ETL), Zapier, databases, etc
• A thought-partner to Product Management and CIR on process and tooling improvements
• Executing on technical plans by improving existing tooling, developing new features, integrating with services CIR uses day-to-day
• Maintaining a reliable overall system for CIR