Incident Response Consultant, Mandiant

Lead large, client-facing incident response engagements, examine cloud, endpoint, and network-based sources of evidence. Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations. Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations. Develop and present comprehensive and accurate reports, trainings, and presentations for both technical and executive audiences. Build scripts, tools, or methodologies to enhance Mandiant’s incident investigation processes.