Collaborate with internal and customer teams to investigate and contain incidents. Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations. Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations. Develop scripts, tools, or methodologies to enhance Mandiant’s incident response processes and capabilities.
Participate in client-facing incident response engagements, examine cloud, endpoint, and network-based sources of evidence. Develop comprehensive and accurate reports and presentations for both technical and executive audiences. Communicate and discuss findings and strategy with internal stakeholders including leadership and technical team members.
Job description provided by Google.
View the original posting
