DFIR Consultant in MWDN

DFIR Consultant віддалено The ideal candidate will have astrong digital forensics and incident response background, akeen eye for detail, and aproactive approach tothreat detection and mitigation. Requirements: Extensive experience inconducting full disk forensics for Windows, Linux, and OSXenvironments, covering both workstations and servers. Ability toperform comprehensive incident response and forensic investigations, including data collection, examination, and analysis. Proficient inanalyzing various types oflogs such asjournal/syslog, Microsoft 365 audit logs, and Windows event logs todetect anomalies and suspicious activities. Some experience with Security Information and Event Management (SIEM) systems such asMicrosoft Sentinel, Splunk, orElastic/ELK. Ability toscript inatleast one language (e.g. Python, PowerShell, golang) Proven capability inthreat hunting using these EDR tools, identifying and mitigating advanced threats within network environments. Some experience with cloud platforms like AWS, Azure, orGoogle Cloud Platform (GCP) Responsibilities: Perform full disk forensic analysis onWindows, Linux, and OSX systems tosupport investigations ofsecurity incidents and breaches. Use forensic tools and techniques togather and examine evidence from various types ofdigital media Analyze awide range oflog data, including journald/syslog, Microsoft 365 audit logs, and Windows event logs, toidentify and understand the nature ofpotential security incidents. Extensive experience inconducting full disk forensics for Windows, Linux, and OSXenvironments, covering both workstations and servers. Ability toperform comprehensive incident response and forensic investigations, including data collection, examination, and analysis. Familiarity with leading Endpoint Detection and Response (EDR) platforms such asCrowdStrike, SentinelOne, orMicrosoft Defender for Endpoint. Operate and Utilize EDR Systems Manage SIEM Tools Develop and maintain scripts toautomate routine DFIR (Digital Forensics and Incident Response) tasks and processes. Leverage experience with cloud platforms toperform forensic investigations and manage security incidents within cloud environments.