Principal Consultant

This role is client-facing and requires the Principal Consultant to lead and produce deliverables based on reactive services client engagements. The Principal Consultant will work directly with multiple customers and key stakeholders (Admins, C-Suite, etc) to manage incident response engagements and provide guidance on longer-term remediation.

Responsibilities

• Perform reactive incident response functions including but not limited to host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs)
• Examine firewall, web, database, and other log sources to identify evidence of malicious activity
• Investigate data breaches leveraging forensics tools including Encase, FTK, X-Ways, SIFT, Splunk, and custom Crypsis investigation tools to determine the source of compromises and malicious activity that occurred in client environments
• Manage incident response engagements to scope work, guide clients through forensic investigations, contain security incidents, and provide guidance on longer-term remediation recommendations
• Ability to perform travel requirements as needed to meet business demands (on average 20%)
• Mentor team members in incident response and forensics best practices

Qualifications

• 8+ years of incident response or digital forensics consulting experience with a passion for cybersecurity
• Strong leadership skills including experience managing a team or individuals
• Experience with leading complicated engagements including scoping, interfacing with the client, and executing on a technical front
• Proficient with host-based forensics and data breach response
• Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open-source forensic tools
• Identified ability to grow into a valuable contributor to the practice, specifically having an external presence via public speaking, conferences, and/or publications
• Bachelor's Degree in Information Security, Computer Science, Digital Forensics, Cyber Security, or related field or equivalent military experience required

Location
Riyadh, Saudi Arabia