Principal Consultant - DFIR

ppbDepartment: /bCyber Services and Capabilities /p pbLocation: /bNLD Rijswijk /p h3Description /h3 pTo manage and service NCC Group clients within the Digital Forensics and Incident Response space. /p pThe Principal DFIR Consultant plays a pivotal role within the team of seasoned analysts, actively participating in the analysis, and response to security incidents and events. With a focus on continuous learning and collaboration the Principal’s are adaptable to most events in challenging and dynamic situations. Through the application of deep technical skills and a strong dedication to detail-oriented analysis the Principal DFIR Consultant plays an extensive role supporting clients. /p pThe Role will carry Line Management opportunities and able to support and mentor all team members. Additionally, the role carries internal cross service support reviewing collaboration and efficiencies. /p h3Key Responsibilities /h3 ul liManaging and coordinating a cohesive team, ensuring effective collaboration, clear communication, and efficient workflow throughout technical engagements. /li liResponding to emergency incidents, including mitigation and remediation activities. /li liMaintaining composure and effectiveness in client Incident Management scenarios. /li liProviding clients with high-quality technical investigations. /li liCollaborating in the identification, resolution, and documentation of security incidents. /li liConducting intelligence-driven investigative analysis. /li liThe ability to discuss wider technology and security posture with a client ultimately to perform Cyber Threat assessments. /li /ul h3Skills, Knowledge Expertise /h3 ul liAmple experience in incident response, security operations or strategic security consulting. /li liStrong technical knowledge, including the ability to conduct analysis in support of cyber incident response activities (to include an understanding of network analysis, host investigation including forensics, malware analysis). /li liSignificant experience in a Digital Forensics environment. /li liExperienced in the use of a case management system. /li liPerform advanced host (Log, OS, memory, EDR) network, and cloud system forensics, log analysis, and malware triage in support of incident response investigations. /li liExperience evaluating client security controls, architecture, and operations. /li liExperience crafting scripts (Perl, python, PowerShell, bash) and tools to further enhance incident investigative efforts. /li liExperience triaging Windows and Linux hosts. /li liExperience with Network Traffic Analysis. /li liExperience with Log Data Analysis. /li liProven ability to explain technical output to a non-technical audience, including at an executive and C-Suite level. /li liExperience working in 24x7 environments and turns. /li liAbility to lead large sized projects as a lead and take responsibility for analysis and reporting. /li liStrong interpersonal and communication skills, including report-writing and presentation skills. /li liThe ability to identify attacker Tactics, Techniques and procedures (TTPs) and to develop indicators of compromise. /li liA relevant professional certification such as CREST CPIA/CRIA/CCNIA/CCHIA or SANS GCFA/GNFA/GCIH will be preferred. /li liStrong understanding of common enterprise technologies and configuration, including could platforms such as Azure, M365, AWS and GCP. /li /ul h3Why NCC Group? /h3 pAt NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks. /p pOur colleagues are our greatest asset, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support. /p pOur mission in the Digital Forensics and Incident Response Team is to be recognized by clients, analyst and partners as world-class player. /p h3Our vision /h3 ul libA trusted advisor at the juncture of cyber and legal /b, we are a global team of experts with local presence. /li libWe help you understand and mitigate threats /b, from external or internal sources. /li libWe are there when you need us the most. /b We help you navigate complex issues often under pressure of time: identifying, preserving, processing and examining digital evidence. /li libWe use technology and insights /b to discover, analyze and present facts. /li /ul pOur advice is unbiased. Our reports are concise. /p pPlease note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. /p /p #J-18808-Ljbffr