Incident Response and DFIR Lead
JustMarkets Tech
- Формат:
- повний remote
- Рівень:
- lead
- Джерело:
- jobs.dou.ua
Що робити
- Lead incident response, containment and forensic coordination for confirmed security incidents
- Act as Incident Commander for major security incidents within the defined authority model
- Assign incident roles and maintain clear ownership of investigation, containment and recovery actions
- Maintain incident timelines, evidence logs, decision logs and action tracking
- Coordinate investigation across endpoints, servers, identities, cloud platforms, SaaS environments and relevant network telemetry
Що очікуємо
- Strong hands-on knowledge of the incident response lifecycle: investigation, containment, eradication, recovery and lessons learned
- Experience leading complex security incidents and coordinating multiple technical teams during active response
- Practical experience investigating endpoint, identity, server, cloud or network compromise using EDR/XDR, SIEM and relevant audit logs
- Ability to reconstruct attacker activity, including initial access, credential abuse, persistence, privilege escalation, lateral movement, data access and exfiltration
- Working knowledge of digital forensics, evidence preservation, forensic timelines and chain-of-custody principles
Схожі вакансії
- Таргетолог / Social Media Marketing Specialist — Meta AdsVibe
Senior / Lead Full-Stack Support & Maintenance EngineerDepositSign$3 000 - $4 000 на місяцьКиївremotesenior- AI Augmented Full-Cycle EngineerBillEase$5 000 - $7 500 на місяць
Manual QA Engineer (with Payments/Fintech Experience)GR8_TECH, за кордономremote- Chief Financial OfficerStudiocode$3 000 - $5 000 на місяць
З блогу Trackr
Усі статті →
Знайдено через trackr.help/jobs · Канал: @trackrhelp · Бот для персональних сповіщень: @trackrhelpBot