Note: The job is a remote job and is open to candidates in USA. Lumifi is seeking a Lead Consultant for their Incident Response and Forensics practice. The role involves acting as an Incident Commander during security incidents, managing customer recovery, and developing incident response plans and playbooks.
Responsibilities
- Available 24/7 for incoming IR work, based on an on-call rotation of 2 weeks on, 4 weeks off on-call rotation
- Mostly remote work but some infrequent emergency travel is required
- Able to act as an Incident Commander for customers, lead a response and recovery effort on their behalf
- Assist and lead in the creation of IR Plan and Playbook Development
- Develop policies and procedures to investigate malware incidents for the entire computer network
- Assists in the development and delivery of malware security awareness products and briefings
- Lead in IR Tabletop Exercises
Skills
- 5+ years of experience in incident response and forensic investigations
- Experienced in disk, M365, cloud and network investigations and forensics, required
- Proficient at IR/Forensics and TTE After-Action Report writing, required
- Strong analytical and problem-solving skills with the ability to tackle complex challenges
- Effective communication skills, both written and verbal, to document and share knowledge
- Ability to adapt and thrive in a fast-paced, evolving technical landscape
- Proven ability to problem-solve and think critically in a fast-paced environment
- Available 24/7 for incoming IR work, based on an on-call rotation of 2 weeks on, 4 weeks off on-call rotation
- Mostly remote work but some infrequent emergency travel is required
- Able to act as an Incident Commander for customers, lead a response and recovery effort on their behalf
- Assist and lead in the creation of IR Plan and Playbook Development
- Develop policies and procedures to investigate malware incidents for the entire computer network
- Assists in the development and delivery of malware security awareness products and briefings
- Lead in IR Tabletop Exercises
- All candidates must be eligible to work in the U.S. for any employer and must be able to pass a background check
- CISSP/CISM
- GIAC Certified Forensic Examiner (GCFE)
- GIAC Experienced Forensics Examiner (GX-FE)
- GIAC Enterprise Incident Response (GEIR)
- GIAC Cloud Forensics Responder (GCFR)
- GIAC Certified Forensic Analyst (GCFA)
- GIAC Network Forensic Analyst (GNFA)
- GIAC Certified Incident Handler Certification (GCIH)
- GIAC Response and Industrial Defense (GRID)
- GIAC Experienced Forensics Analyst (GX-FA)
- GIAC Linux Incident Responder (GLIR)
- Experience with standards framework assessments
Company Overview