Experienced Principal Cybersecurity Incident Responder – Web & Cloud Application Development

Join blithequark, a leading private organization in the industry, as we seek an experienced Principal Cybersecurity Incident Responder to join our team. As a key member of our Network Protection Episode Reaction group, you will play a vital role in responding to recognized or announced security incidents, assessing data to determine incident impact, conducting investigations, and developing and implementing incident response plans.

About blithequark

blithequark is a dynamic and innovative organization that values digital protection, scholarly interest, and readiness to drive improved solutions and achieve results. We are committed to creating a climate of strength and resilience in high-pressure situations, responding with speed and urgency to critical security issues. Our team is passionate about cybersecurity and is dedicated to staying ahead of the curve in terms of technology and best practices.

Job Summary

As a Principal Cybersecurity Incident Responder, you will lead incident response efforts for the entire lifecycle of security incidents, including incident identification, analysis, evaluation of impact, collaboration with the Global IT association for regulation and destruction, and communication of status and technical details to senior leadership and incident coordinators. You will also be responsible for developing and implementing IR program development and growth, including process and innovation, staying informed about emerging threat landscapes, and suggesting advanced approaches and technologies for modernizing threat identification and prevention.

Key Responsibilities

* Lead incident response efforts for the entire lifecycle of security incidents, including incident identification, analysis, evaluation of impact, collaboration with the Global IT association for regulation and destruction, and communication of status and technical details to senior leadership and incident coordinators

• Develop and implement IR program development and growth, including process and innovation, staying informed about emerging threat landscapes, and suggesting advanced approaches and technologies for modernizing threat identification and prevention
• Engage, mobilize, and manage external breach and forensic retainer service providers as needed
• Establish and develop forensic program combining top-tier process and technology from Advanced Digital Forensics Incident Response (DFIR) communities; lead digital forensic analysis of various security incidents and suspicious events within the organization, including mobile, server, cloud, and digital
• Collaborate with SOC Examiners and Incident Coordinators to create and work with threat-based IR tabletops and simulation exercises, highlighting and identifying IR process improvement potential opportunities
• Collaborate with SIEM Designing team to improve telemetry and visibility for Incident discovery and investigations

Essential Qualifications

* Bachelor's degree in a relevant field, such as Digital Protection, Data Innovation, Data Confirmation, or a related field

• 3+ years of combined experience in incident response, malware analysis, and digital forensic analysis
• Strong understanding of security incident management strategies throughout the entire lifecycle: evaluation, control, recovery, documentation, evidence protection, and digital forensics
• Proven experience performing in-depth digital forensic examinations of mobile devices, servers, workstations, tablets, etc., and high-level working experience of at least one digital forensic tools (i.e., EnCase, FTK, etc.)
• Should have impressive experience in malware identification, malware analysis, and figuring out malicious code
• Broad active experience with EDR technologies, malicious code analysis, packet capture analysis, identifying indicators of compromise (IOC), threat analysis, anomaly detection, advanced firewalls (NGFW), security incident and event management (SIEM) technologies, and vulnerability assessment tools
• Strong understanding of networking, operating system platforms, social database management systems, as well as cloud and hosting services
• Should have strong and composed relational skills; relational cooperative skills; and the ability to communicate digital protection ideas to technical and non-technical audiences
• Working understanding of compliance and regulatory requirements for SOX, PCI, GDPR, etc.

Preferred Qualifications

* Four-year college education or equivalent experience in Digital Protection, Data Innovation, Data Confirmation, or a related field

• 3+ years of combined experience in incident response, malware analysis, and digital forensic analysis
• Certifications like CISSP or equivalent

What We Offer

* Competitive salary of $27/hour

• Opportunity to work with a dynamic and innovative organization
• Collaborative and supportive work environment
• Professional development and growth opportunities
• Comprehensive benefits package, including health, dental, and vision insurance
• Generous paid time off and holidays
• Access to cutting-edge technology and tools
• Opportunity to work on high-profile projects and initiatives

How to Apply

If you are a motivated and experienced cybersecurity professional looking for a new challenge, please submit your application through our website. We look forward to hearing from you! Apply for this job