Back to jobs
Job Description
- Lead large, client-facing incident response engagements, examine cloud, end-point, and network-based sources of evidence.
- Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs) that can be applied to current and future investigations.
- Build scripts, tools, or methodologies to enhance Mandiant’s incident investigation processes.
- Develop and present comprehensive and accurate reports, trainings, and presentations for both technical and executive audiences.
- Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.