Senior Consultant - Cyber Forensics & Incident Response - SG

Date: 16 Oct 2024

Location:Singapore, Singapore, SG Kuala Lumpur, MY

• Assist clients in developing a cyber incident strategy, assessing, and remediating weaknesses, and conducting exercises to better prepare clients in responding to and recovering from cyber incidents.
• Conduct advanced computer and network incident investigations relating to various forms of malware, computer intrusion, theft of information, denial of service, data breaches, etc.
• Provide clients guidance and advice with regards to cyber incidents, forensics, and incident response
• Lead and/or support in-depth triage and investigations of urgent cyber incidents in cloud, traditional, and hybrid environments.
• Perform incident response functions including but not limited to host-based analytical functions (e.g., digital forensics, metadata, malware analysis, etc.) through investigating Windows, Unix based, appliances, and Mac OS X systems to uncover Indicators of Compromise (IOCs) and/or Tactics, Techniques and Procedures (TTPs).
• Create and track metrics based on the MITRE ATT&CK Framework and other standard security-focused models.
• Work with application and infrastructure stakeholders to identify key components and information sources such as environments (on-premises versus cloud), servers, workstations, middleware, applications, databases, logs, etc.
• Participate in incident response efforts using forensic and other custom tools to identify any sources of compromise and/or malicious activities taking place.

• Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
• Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams’ work to achieve the objectives.
• Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
• Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
• Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.

• Bachelor’s degree in the relevant field and approximately 5 years or more of related work experience.
• One or more GIAC (e.g., GCFE, GCFA, GREM, GCIH, GASF, GNFA, etc.), CREST or other digital forensic and/or incident response certifications.
• 5+ years of professional experience in cybersecurity and/or information security or demonstrated equivalent capability.
• 2+ years hands-on working in cyber incident response and investigations in medium to large organizations with cloud and forensics components.
• Experience with response and analysis tools such as En Case Forensic, En Case Enterprise, Access Data FTK, Volatility, SANS SIFT, Carbon Black, Internet Evidence Finder, Magnet Axiom, Splunk, Elastic Search or Crowd Strike
• Experience with programming languages such as Python, Java Script, PHP, SQL etc.
• Experience with malware analysis and understanding attack techniques.
• Experience interpreting, searching, and manipulating data within enterprise logging solutions.
• Familiarity with threat intelligence and applications within incident response investigations.
• Hands-on Dev/Sec/Ops experience with cloud environments and underlying storage, compute and monitoring services.
• Prior experience with cloud common services
• Hands-on experience with forensic investigations or large-scale incident response in cloud environments.
Hands-on experience with containerization methods and tools (e.g., Docker, Kubernetes) including incident response and digital forensics.

Requisition ID: 105780