Incident Response & Forensics Specialist

Remote: Local to NY City

Duration : one year

PLEASE NOTE THIS POSITION WILL ALLOW CONSULTANT TO WORK REMOTELY. HOWEVER, AS A DIGITAL FORENSICS / INCIDENT RESPONSE ANALYST, DUTIES WILL OCCASSIONALLY NECESSITATE CONSULTANT TO WORK ONSITE. THEREFORE, WILL BE CRITICAL FOR THE CONSULTANT TO BE LOCAL TO NYC AND ABLE TO TRAVEL TO OUR OFFICE WITHOUT ISSUE, AS NEEDED (AT THEIR OWN EXPENSE).

Incident Response & Forensics
-------------------------------------------------------------------------------------------------------------------------------------------------
The Metropolitan Transportation Authority (MTA) is seeking a highly technical Incident Response & Forensics Specialist. This position is a part of the IT Threat Intelligence group within the Cyber Security Operations Center and will be expected to provide direct support to the 24/7 Cyber Security Monitoring group as needed. The responsibilities include, but are not limited to, the following:

Serving as a primary point of contact for MTA CSOC & MSSP Cybersecurity Incident escalations
Interfaces directly with vendors & third parties for notified/observed compromises
Forensics on memory, disks, and logs
Malware analysis (dynamic & static)
Involvement in full incident response lifecycle
Processes evidence in accordance with Chain of Custody
Creates Incident reports to brief to executive management
Provide recommendations to prevent similar incidents
Assist the Threat Intelligence group in other functions including
o Threat Intelligence / Threat Hunting
o Threat Readiness
o Cyber Content Engineering & Automation

Skills:
Excellent communication skills
Strong experience with digital forensic tools
Strong understanding and analysis of code such as Powershell, PERL, Python
Cybersecurity certifications (preferred)
Experience with OT & PCI technologies (preferred)

Minimum requirements:
Bachelor's degree in Computer Science, Information Services, or IT Security related field Or- A satisfactory equivalent with at least 3 years of IT-Security experience.
Minimum of 3 years of experience Tier 1 & 2 support for cyber security operation center.
Minimum of 3 years' experience with performing incident response functions & investigations