Senior Incident Response Security Consultant

Lead large, client-facing incident response engagements, examine cloud, endpoint, and network-based sources of evidence. Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs) that can be applied to current and future investigations. Build scripts, tools, or methodologies to enhance Mandiant’s incident investigation processes. Develop and present comprehensive and accurate reports, trainings, and presentations for both technical and executive audiences. Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.