|
Title: Incident Response & Forensics
|
|
|
|
Location: Remote, In Proximity to NYC Metro Region
|
|
|
|
Rate: $35 C2C (non negotiable)
|
|
|
|
Note: Share the Signed CMP form and ID for the submission. Job description: The Metropolitan Transportation Authority (MTA) is seeking a highly technical Incident Response & Forensics Specialist. This position is a part of the IT Threat Intelligence group within the Cyber Security Operations Center and will be expected to provide direct support to the 24/7 Cyber Security Monitoring group as needed. The responsibilities include, but are not limited to, the following: • Serving as a primary point of contact for MTA CSOC & MSSP Cybersecurity Incident escalations • Interfaces directly with vendors & third parties for notified/observed compromises • Forensics on memory, disks, and logs • Malware analysis (dynamic & static) • Involvement in full incident response lifecycle • Processes evidence in accordance with Chain of Custody • Creates Incident reports to brief to executive management • Provide recommendations to prevent similar incidents • Assist the Threat Intelligence group in other functions including o Threat Intelligence / Threat Hunting o Threat Readiness o Cyber Content Engineering & Automation Skills: • Excellent communication skills • Strong experience with digital forensic tools • Strong understanding and analysis of code such as Powershell, PERL, Python • Cybersecurity certifications (preferred) • Experience with OT & PCI technologies (preferred) Minimum requirements: • Bachelor’s degree in Computer Science, Information Services, or IT Security related field –Or- A satisfactory equivalent with at least 3 years of IT-Security experience. • Minimum of 3 years of experience Tier 1 & 2 support for cyber security operation center. • Minimum of 2 years’ experience with performing incident response functions & investigations Candidate must possess adequate skills with multiple programming languages and must demonstrate that they can reverse engineer malware code. The Candidate must have experience in Cyber Security Incident Response. Must be proficient with UNIX, Windows, OSX, and Mobile Devices. Candidate must be proficient with the administration of Office365 and all its security features.
|
|
|
|
|
