Cyber Analyst, Digital Forensics Incident Response

Cybersecurity Analysts focused on Digital Forensics and Incident Response (DFIR) deliver incident investigation and response services to At-Bay insureds. Responsibilities include forensically sound collection, transmission, and storage of digital evidence, analysis of digital evidence to identify indicators of compromise and adversary activity. Further responsibilities include development of incident timelines and theories of compromise. Identification of incident root causes, participation in threat actor negotiations as necessary (e.g., ransom negotiations, etc.), and participation in incident recovery activities as necessary. Other responsibilities include development and delivery of incident reports to document key incident details for engagement stakeholders. Also includes development and delivery of recommendations to mitigate the risk of future incidents for impacted insureds and development and delivery of incident response training and simulations for targeted insureds.