Lead, Cyber Defense & Incident Response

About the role

The Digital Forensics & Incident Response Lead will serve as an individual technical contributor, responsible for conducting digital forensic and incident response analysis, responding to security incidents, assisting with threat hunting operations, performing incident readiness activities, and completing other related cybersecurity tasks in a highly dynamic global corporate environment.

Responsibilities

• Scope and perform enterprise-wide, global investigations with both on-prem and cloud technologies such as Active Directory/Entra, M365, Azure, AWS, etc.
• Leverage Splunk’s Search Processing Language (SPL) and Microsoft’s Kusto Query Language (KQL) in support of investigative workflows.
• Utilize EDR tooling to perform enterprise-wide investigations and analysis.
• Perform log, host, memory, and network-based forensics in support of active investigations.
• Perform malicious code triage in support of incident response activities.
• Possess strong verbal and written communication skills sharing key investigative details to stakeholders and business leaders globally.
• Collaborate closely with technical stakeholders in support of active investigations.
• Develop scripts, queries and automation workflows in support of XSOAR.
• Lead and contribute to unique team-driven projects, advancing the team's forensic and response capabilities across the enterprise.

Requirements

• 5 plus years of experience responding to cyber incidents in large corporate/enterprise environments.
• Bachelor's degree in Digital Forensics, Information Security, Computer Science, Information Technology, or related discipline.
• Experience using enterprise forensic software suites (X-Ways, EnCase, etc.).
• Knowledge of common scripting languages (Python, PowerShell, Bash, etc.).
• Industry standard certifications (CCE, EnCE, GCFE, GCFA, GCIH, GREM, GNFA, GPEN, etc.).
• Comprehensive understanding of adversarial threat frameworks such as MITRE ATT&CK and Lockheed Martin’s Cyber Kill Chain.

Skills & Expertise

• 5 plus years of experience responding to cyber incidents in large corporate/enterprise environments.
• Bachelor's degree in Digital Forensics, Information Security, Computer Science, Information Technology, or related discipline.
• Experience using enterprise forensic software suites (X-Ways, EnCase, etc.).
• Knowledge of common scripting languages (Python, PowerShell, Bash, etc.).
• Industry standard certifications (CCE, EnCE, GCFE, GCFA, GCIH, GREM, GNFA, GPEN, etc.).
• Comprehensive understanding of adversarial threat frameworks such as MITRE ATT&CK and Lockheed Martin’s Cyber Kill Chain.

Benefits

Prudential offers a comprehensive benefits package including medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills.

Pay

$123,700.00 to $204,100.00

Schedule

N/A