Senior Incident Response Consultant – Rapid Response
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Incident Response Consultant leading ransomware investigations for Sophos, a global cybersecurity provider. Directing forensic response, customer communications, remediation, and MITRE ATT&CK reporting.
Responsibilities:
- Work Fri, Sat, Sun, and Monday, with Tuesday, Wednesday, and Thursday off
- Lead kickoff calls with customers to understand their situation and identify initial response actions to contain threats
- Provide customers with post-incident best-practice guidance
- Lead daily customer update calls and deliver forensic findings
- Send concise email updates between calls
- Direct forensic investigations, identify priorities, and delegate tasks to analysts
- Conduct multiple Rapid Response incidents concurrently
- Determine analyst-identified TTPs and add them to the threat intelligence platform
- Write timely, clear, and concise executive-summary-style reports
- Lead basic-to-moderate complexity projects contributing to development of the Sophos Rapid Response service
- Provide daily handover notes to teams in different time zones or when incident responsibility transfers
- Ensure appropriate actions are taken by the team and customer to neutralize threats
- Conduct root cause analysis, including determining whether data exfiltration occurred when evidence is available
- Produce reports containing timelines mapped to the MITRE ATT&CK framework and remediation guidance
- Lead a team of Incident Response Consultants and communicate complex technical information to executive stakeholders
Requirements:
- 5+ years of experience leading incident response investigations involving ransomware
- Experience leading BEC investigations
- Continuously learning and staying informed of the changing threat landscape
- Proven track record of successful neutralization and remediation of ransomware threats
- Excellent understanding of the Incident Response process
- Excellent understanding of cyber risks and ability to qualify them to customers
- Excellent oral communication skills
- Strong written communication skills
- Ability to manage time effectively
- Ability to delegate and prioritize tasks across multiple incidents
- Ability to excel under stressful circumstances
- Willingness to begin work early and/or stay late when warranted for customer engagements
- Strong grasp of the MITRE ATT&CK framework
- Enjoy mentoring and assisting in the development of junior analysts
- Team-player attitude with willingness to share knowledge
- Ability to work some weekends and holidays
- Post-secondary education in Cybersecurity, comparable
- Legal authorization to work in Romania without requiring employer sponsorship
- Desirable: Cybersecurity certifications such as CISSP or GCFA
- Desirable: Experience with SIEM technology such as Splunk or ELK
- Desirable: Willingness to work occasional overtime
- Desirable: Experience writing SQL queries
- Desirable: Experience writing PowerShell, Python, or Bash scripts
Benefits:
- Remote-first working model, with remote work as the primary option for most employees
- Employee-led diversity and inclusion networks
- Annual charity and fundraising initiatives
- Volunteer days
- Global employee sustainability initiatives
- Global fitness and trivia competitions
- Global wellbeing days
- Monthly wellbeing webinars and training
- Equality of opportunity and support with recruitment and selection process adjustments
Similar Jobs
Retirement Plan Consultant – TPA/DPS
Retirement Plan Consultant administering recordkeeping, compliance, and pension plan services for NBT, a stable financial institution. Supporting clients, regulatory filings, reporting, and plan amendments.
Franchise Business Consultant
Franchise Business Consultant supporting Round Table Pizza franchise operations, profitability, and brand standards. Coaching franchisees and driving store growth across the western United States.
Franchise Business Consultant
Franchise Business Consultant supporting Round Table Pizza franchise operations, profitability, brand standards, and franchisee growth. Coaching restaurant teams across a designated territory for FAT Brands.
Associate Technical Consultant
Associate Technical Consultant developing Oracle Cloud integrations, migrations, and customizations. Supporting higher-education projects across full technical delivery lifecycles.
Associate Functional Consultant – HCM
Associate Functional Consultant configuring Oracle Cloud HCM for higher-education clients. Supporting implementations, testing, training, integrations, and post-go-live improvements.
French Speaking Rent-a-Car Consultant
French-speaking rent-a-car consultant managing vehicle bookings, insurance guidance, and customer service. Mercier Consultancy Group supports relocation to Sofia, Bulgaria.
Technical Consultant
Technical Consultant supporting utility clients and integrating CIS Infinity billing software. Troubleshooting issues, delivering training, and managing implementation projects remotely across Canada and the US.
Senior Portfolio Consultant – Mountain or Pacific Time Zones
Senior Portfolio Consultant implementing complex portfolios for Mercer Advisors’ high-net-worth financial planning clients. Developing investment deliverables and coordinating transitions across advisory and operations teams.
Utilization Management Nurse Consultant
Utilization management nurse reviewing clinical cases and making evidence-based coverage decisions for CVS Health members. Coordinating treatment with providers and improving care quality remotely.
Talent Consultant
360 Talent Consultant managing executive and C-suite recruitment for RecruitMyMom. Driving client growth, placements, and AI-enabled sourcing across South African and international markets.
Team Lead – Senior Consultant, ITSM, IAM, ITOM
Teamleiter und Senior Consultant für ManageEngine-ITSM, IAM und ITOM bei MicroNova, einem deutschen Software- und Systemhaus. Führung eines fünfköpfigen Consulting-Teams sowie Weiterentwicklung von Beratungs- und Supportleistungen.
Senior Contracts Management Consultant
Contracts consultant optimizing OnTrac’s U.S. same-day and next-day delivery network. Leading territory strategy, carrier sourcing, contract negotiation, compliance, and network resiliency.
Senior Consultant – Contracts Management, Contracts & Business Economics
Contracts strategist optimizing carrier economics, pricing, and negotiations for OnTrac's U.S. same-day and next-day delivery network. Driving contract governance, cost optimization, and financial performance.
Senior Contracts Management Consultant
Contracts strategist leading RSP negotiations, pricing, and cost models for OnTrac’s U.S. same-day and next-day delivery network. Driving compliance, governance, and financial performance.
Senior Loss Control Consultant
Senior loss control consultant helping Zenith, a workers’ compensation insurer, reduce workplace injuries and policyholder costs. Conducting field surveys, investigations, training, and safety recommendations across Southern California.
VIP Travel Consultant
VIP Travel Consultant managing complex corporate travel reservations for BCD Travel. Providing personalized service and resolving urgent traveler issues across flights, hotels, and ground transportation.
Domain Consultant
Remote Domain Consultant advising customers on network security transformation and zero trust. Designing solutions and supporting technical wins for Palo Alto Networks, a cybersecurity company.
Application Specialist, Nursing Consultant
Healthcare technology consultant implementing and training Dedalus ORBIS for German hospitals. Optimizing clinical workflows, supporting users, and documenting system changes.
Clinical Consultant, Professional Services
Clinical Consultant implementing BD Medication Systems Infusion solutions across U.S. hospitals. Leading clinical workflows, integrations, training, and customer go-lives with extensive travel.
Clinical Consultant, Professional Services
Clinical Consultant implementing BD Medication Systems Infusion systems for hospitals. Leading clinical workflows, integrations, training, go-live support, and extensive customer travel.