Cyber Analyst, At-Bay

• Previous digital forensics and incident response experience
• Strong oral and written communication skills
• Previous hands-on experience performing digital forensics and incident response, including several of the following:
• Business Email Compromise
• Ransomware
• Digital evidence collection and analysis
• Development and analysis of cyber threat intelligence
• Leadership of or participation in investigations involving digital evidence
• Intrusion detection / cyber threat hunting
• Malware analysis
• Incident recovery activities such as restoration of data from backups, operation of decryptor tools, etc
• Previous hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.)
• Bachelor’s degree or equivalent
• Minimum of 2 years of experience in cybersecurity operations, incident response, incident recovery, or another security discipline
• Willingness to travel as needed to perform job functions

Desirable

• Cybersecurity Analysts focused on Digital Forensics and Incident Response (DFIR) deliver incident investigation and response services to At-Bay insureds via:
• Forensically sound collection, transmission, and storage of digital evidence
• Analysis of digital evidence to identify indicators of compromise and adversary activity
• Development of incident timelines and theories of compromise
• Identification of incident root causes
• Participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.)
• Participation in incident recovery (e.g., restoration of data from backups, reimaging workstations and servers, rebuilding network infrastructure, etc.) activities as necessary
• Development and delivery of incident reports to document key incident details for engagement stakeholders including executive leaders for insureds, breach coach attorneys, and At-Bay claims management staff as necessary
• Development and delivery of recommendations to mitigate the risk of future incidents for impacted insureds
• Development and delivery of incident response training and simulations for targeted insureds
• The expected hours will be 11am PT-8pm PT