Mirai Security Looking for Digital Forensics and Incident Response Consultant (DFIR) at Remote Full Time

Digital Forensics and Incident Response Consultant (DFIR)

At Mirai Security, we do cyber security better.

Mirai Security is built on the trust we earn from our clients, and we continue to nurture that trust with every company we work with. We are a collective of cyber security professionals who want to do cyber security consulting better. We work closely with our clients to align cyber security initiatives with their business goals and ensure everything we do enables, protects, advances and secures the organizations we work with. Our goal is to provide our clients with the right cyber security tools and strategies so they can achieve their goals and grow their businesses.

The DNA of Mirai Security was forged out of Vancouver’s cyber security community by members who wanted to do security better. Mirai’s founders realized the potential of their community and resolved to develop a collective with a great culture that would naturally attract like-minded cyber security professionals to work as one. Mirai continues to support the security community through sponsorship, mentorship, and recruitment.

Who Are We?

At Mirai, our culture is defined by our purpose, core values, and our people. We not only seek out employees but people passionate about contributing to our company culture, our growth within the industry, and the greater cyber security community. You will be a great fit for us if you share our core values of Integrity, Care, Diversity, Growth-Mindset, and Innovation.

We are looking for like-minded experts to help make our clients secure!

Who You Are

We are seeking a Digital Forensics and Incident Response Consultant to join our growing team at Mirai. As a trusted advisor to our clients, the consultant is responsible for the containment and recovery of cyber security incidents with our clients. Leveraging your experience in digital forensics and incident response, you will provide clients with actionable guidance during active cyber incidents. The successful candidate will work directly with clients to analyze, contain, and recover from cyber threats and intrusions. With your strong technical and consulting skills, you will also guide and transform clients from reactive response to proactive cyber security posture, including incident response readiness.

Our clients rely on us to help them build tailored security programs to enable their business. The ideal candidate will be a self-driven, passionate cyber security professional with the right balance of technical know-how and business acumen to proactively engage with Mirai’s clients to understand their requirements and support their business objectives.

Responsibilities

· Engage with Mirai clients on incident response and forensics consultations

· Respond and investigate active cyber incidents and support containment, eradication, and recovery activities

· Determine root cause with available digital forensics and live detection data to provide client strategic and tactical recommendations to improve overall security posture and readiness

· Perform host, network, and memory forensics on both on-prem and cloud environments

· Perform analysis of artifacts in support of the investigation, including malware analysis, threat intelligence research, and SIEM analysis.

· Develop incident response documentation for clients, such as incident response plans, playbooks, and runbooks.

· Facilitate incident response tabletop exercises with technical and non-technical teams and stakeholders.

· Leveraging your cyber security expertise and liaise with, coach, and advise business stakeholders and manage client expectations

· Prepare and deliver strategic and tactical reports, documentation, presentation, or other solution collateral

· Support the SecOps team in other consultation efforts in areas of detection and response as needed

Qualifications

· 3 to 5 years of hands-on working experience in incident response or security operations with a strong focus on the analysis of cyber threats and intrusions, malware analysis, or digital forensics

· Ability to work outside of core working hours on an as needs basis

· Perpetual learner and self-motivator, able to work remotely with minimal supervision and manage a team effectively

· Strong verbal and written communication skills to translate technical findings into strategic and tactical recommendations to reduce cyber security risks

· Strong and practical understanding of offensive security methodologies

· Cloud incident response with AWS, Azure, and/or GCP is an asset

· Experience and comfortable in presenting findings and recommendations to non-technical audiences and executives

· Certification or hands-on working experience with the Crowdstrike Falcon platform or Microsoft security stack is an asset

· Experience with one or more commonly adopted security frameworks or standards such as ISO 27001, NIST CSF, CIS Top 20, PCI-DSS, etc.

· Industry certifications in incident handling and forensics are an asset (GIAC, GCFE, GCFA). Crowdstrike certifications such as CCFA, CCFR, and CCFH are considered an asset

Desired Certifications:

GIAC Certifications:

GCIH: GIAC Certified Incident Handler

GCFE: GIAC Certified Forensic Examiner

GCFA: GIAC Certified Forensic Analyst

CCFR: GIAC Cloud Forensics Responder

CrowdStrike certs: (nice to haves)

CCFA: CrowdStrike Certified Falcon Administrator

CCFR: CrowdStrike Certified Falcon Responder

CCFH: CrowdStrike Certified Falcon Hunter

Must Have

· Hands-on experience with digital forensics analysis tools for incident response investigations in one or more of the following areas:

o Disk and Memory Forensics in Windows, Linux, and/or Mac environments

o Network traffic analysis

o Malware analysis

o Log analysis

o MS Active Directory and MS Office 365

o Cloud Forensics

o Working experience with threat protection and detection solutions, including SIEM, XDR, EDR, NDR, IDS/IPS, is an asset

What’s In It for Me?

· Be part of a team of incredibly talented, passionate, and driven people setting the new standard for Information Security

· Remote work opportunities

· Competitive salary including merit increases

· Performance bonus

· Comprehensive benefits package including but not limited to health, dental, vision

· Continuous learning opportunities and community networking

· Be confident bringing your whole self to work—we’re proud to be an inclusive company with a diverse team and values grounded in ethics and equality

While we thank all applicants for their interest, only shortlisted applicants will be contacted.

Thank-you for your interest in Mirai Security!

Job Types: Full-time, Permanent

Benefits:

• Company events
• Dental care
• Disability insurance
• Employee assistance program
• Extended health care
• Flexible schedule
• Life insurance
• Paid time off
• Tuition reimbursement
• Vision care
• Wellness program
• Work from home

Schedule:

• 8 hour shift
• Monday to Friday

Supplemental pay types:

• Bonus pay

Application question(s):

• Are you legally able to work in Canada?

Experience:

• Incident Response and Digital Forensics: 5 years (preferred)

Work Location: Remote