Title: Senior Consultant – Incident Response Work Location: Remote Travel: As needed up to 20% Summary: Since 2009, Kivu has provided incident response, risk management, and forensics investigation services to clients around the globe. Kivu is well known in the cyber security industry for our high level of technical expertise and legally sound, practical business solutions. We are a leading provider of incident response and digital forensic services to the cyber insurance community in North America and Europe. Job Description: Kivu Consulting’s Incident Response practice is rapidly growing, and we are hiring senior level incident response professionals to work with our expansive customer base. We are continuing to enhance our incident response, forensics, and threat hunting team capabilities. By joining Kivu Consulting, you will be part of a highly specialized team to respond to data breaches in complex business environments using a variety of tools and techniques. As a teammate, you will work in a fast-paced and highly collaborative environment alongside a diverse and talented team in support our mission of providing world-class incident response services to our clients. Kivu’s Senior Consultants have broad experience in security consulting services with a deep focus on Incident Response and the tools, tactics, and procedures used by attackers. Our Senior consultants understand the big picture and are adept at setting and delivering to client expectations with the highest degree of quality. Required Knowledge, Skills, Abilities: Five or more years of experience in incident response, including commonly used tools such as EnCase and two or more of the following: Windows disk and memory forensics Unix or Linux disk and memory forensics Mac Forensics Mobile Forensics Network traffic analysis, and log analysis Static and dynamic malware analysis Five or more years of experience and deep technical knowledge of techniques to collect evidence, maintain chain of custody and with supporting documentation, evidence storage, analysis, and evidentiary reporting. Four or more years of experience and an understanding of cyber security operations, security monitoring, EDR, and SIEM tooling, e.g., Endgame, Falcon, and Splunk. Must be able to work in the US without sponsorship. Preferred Requirements: Security Certifications: CISSP, SANS GIAC (GCFA, GCIH, GRID) Knowledge of enterprise security controls related to authentication and identity management, security network architectures, and application-based security controls. Excellent time management, writing and communications skills. Network traffic and protocol analysis with tools like Wireshark. Experience building scripts, tools, and methodologies that enhance investigation processes. Responsibilities and Duties: Lead end-to-end investigations, from kickoff through to post-breach remediation, with Kivu’s customers. Identify and investigate incidents to understand cause and extent of a breach leveraging Kivu’s technical tooling and threat intelligence sources. Conduct forensics, log, and malware analysis across a client’s environment in support of our investigations. Leverage findings from the investigation to develop and articulate expert level opinions to both technical and executive audiences. Develop comprehensive written reports and oral presentations to both technical and executive audiences. Effectively communicate and collaborate with customers including legal counsel, technical and executive stakeholders. Collaborate with practice leadership in leveraging subject matter expertise in the scoping of customer engagements. Equipment Used: All equipment required to perform duties and tasks were previously described. Physical / Environmental Factors: The physical demands are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Kivu Consulting considers applicants for all positions without regards to race, color, national origin, age, religion, sex, marital status, veteran or military status, disability, or any other legally protected status. Kivu Consulting is an Equal Opportunity Employer. Benefits: Flexible PTO Medical, Dental, and Vision 401k Remote Work #J-18808-Ljbffr
Wireshark Incident response Technology savvy Certified Information Systems Security Professional (CISSP) Communication Legal Officer scripting authentication scoping falcon Cybersecurity Communication with clients application-security Consulting Splunk SIEM time-management Clarity of speech and writing Endpoint Detection and Response (EDR) encase risk management Identity Management Collaboration log-analysis Cyber threats