Forensics Specialist
Location: We are seeking candidates that are Pacific Standard Time zone based (or open to working those hours.
About the role
We are seeking a motivated Forensics Specialist to join our Varonis Forensics team. As a member of our elite cyber security experts, you will be at the forefront of cyber defense, leading Incident Response engagements and providing crucial support for forensic investigations.
Your contribution will be pivotal in delivering exceptional breach response services to our largest customers. You will work alongside our world-class DFIR engineering and R&D teams, contributing to product development, fortifying customer security, and establishing your presence in the cyber tech ecosystem.
If you are passionate about cybersecurity and have a background in digital forensics, incident response, and SOC operations, this is the perfect opportunity for you to make an impact and advance your career. Join us on the front lines of cyber defense and help protect our customers from the ever-evolving threat landscape.
Responsibilities
- Become an essential member of our 24x7 follow-the-sun team
- Collaborate closely with key stakeholders and customers to improve processes and products.
- Utilize the Varonis platform and operational tooling to perform high-quality analysis
- Independently lead and execute responses to high-profile cyber threat incidents in customer environments.
- Conduct threat hunting using the Varonis platform and other SOC-related tools and platforms.
- Contribute to the creation and enrichment of knowledge bases through detailed technical investigations and the discovery of new findings, and implement best practices based on these insights.
- Engage in close collaboration with our engineering team to enhance the functionality of tools and update investigation playbooks.
- Serve internally and externally as a Cyber Security Subject Matter Expert (SME) to help educate peers and customers, when required.
- Serve as the Technical Lead on engagements to guide the investigation and forensic analysis.
- Execute advanced host, network, and hyperscaler investigations to identify root cause.
- Collaborate with team members to provide best-in-class delivery outcomes for our clients.
Requirements
- 4+ years of experience working in Digital Forensics and Incident Response/SOC teams.
- Demonstrated knowledge of Windows and Linux forensic techniques, tools, and concepts.
- Proven experience executing enterprise-scale cybersecurity investigations, including ransomware, intrusion activity, and advanced persistent threats.
- Experience providing defensible containment steps based upon limited information and under time pressure.
- Tool-agnostic mentality and ability to create ad-hoc tooling to support investigations of emerging threats.
- Strong ability to work directly with clients and internal stakeholders during cyber incidents.
- Strong technical foundation in standard Information Technology concepts, languages, and services (Active Directory, SQL, KQL, OSI model, etc.).
- Experience working with multiple enterprise security solutions (e.g., SIEMs, firewalls, IDPS, AV/EDRs, IAM, DLP).
- Proven success contributing to a team-oriented environment.
- Excellent communication and interpersonal skills.
- Strong critical thinking, deductive reasoning, problem-solving, and prioritization skills.
- Capable of adapting to a fluid and dynamic schedule, ensuring coverage during hours and days beyond the standard work week.
Ways to Stand Out from the Crowd
- Experience working with common cloud technology providers (e.g., AWS, GCP, Azure).
- Experience performing Incident Response in platforms such as SalesForce, GitHub, etc.
- Experience performing Incident Response related to AI/LLM models/platforms/agents
- Relevant industry certifications (GCIH, GCFA, etc)
- Experience performing/presenting industry-relevant research
We invite you to check out our Instagram Page to gain further insight into the Varonis culture!
@VaronisLife
Varonis is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristics
#LI-Remote
Skills Required
- 4+ years of experience working in Digital Forensics and Incident Response or SOC teams
- Knowledge of Windows and Linux forensic techniques, tools, and concepts
- Experience executing enterprise-scale cybersecurity investigations involving ransomware, intrusion activity, and advanced persistent threats
- Experience providing defensible containment steps under time pressure and with limited information
- Tool-agnostic mindset and ability to create ad hoc tooling for emerging threat investigations
- Ability to work directly with clients and internal stakeholders during cyber incidents
- Technical foundation in Active Directory, SQL, KQL, OSI model, and standard IT concepts and services
- Experience with enterprise security solutions including SIEMs, firewalls, IDPS, antivirus or EDR, IAM, and DLP
- Team-oriented collaboration experience
- Excellent communication and interpersonal skills
- Critical thinking, deductive reasoning, problem-solving, and prioritization skills
- Ability to work a fluid schedule, including hours and days beyond the standard work week
- Experience with AWS, GCP, or Azure
- Incident response experience in Salesforce or GitHub
- Incident response experience involving AI, LLM models, platforms, or agents
- Relevant certifications such as GCIH or GCFA
- Experience performing or presenting industry-relevant research
Varonis Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Varonis and has not been reviewed or approved by Varonis.
-
Healthcare Strength — Healthcare coverage is positioned as comprehensive, including medical, dental, and vision options that start immediately in some locations. The package is frequently characterized as a strong part of the overall rewards offering alongside other core benefits.
-
Retirement Support — Retirement benefits include a 401(k) with company matching (or a pension plan by region), which strengthens the long-term value of the package. Participation is complemented by additional ownership programs that increase total-rewards attractiveness.
-
Equity Value & Accessibility — Equity-related rewards such as stock options and an employee stock purchase plan (ESPP) are a notable part of the total compensation mix. These elements are often cited as helping offset middling perceptions of base pay, especially where equity participation is accessible.
Varonis Insights
What We Do
Varonis is a pioneer in data security and analytics, fighting a different battle than conventional cybersecurity companies. Varonis focuses on protecting enterprise data on premises and in the cloud: sensitive files and emails; confidential customer, patient and employee data; financial records; strategic and product plans; and other intellectual property. The Varonis Data Security Platform detects insider threats and cyberattacks by analyzing data, account activity, perimeter telemetry, and user behavior; prevents and limits disaster by discovering, classifying and locking down sensitive, regulated and stale data; and efficiently sustains a secure state with automation. With a focus on data security, Varonis serves a variety of use cases including data protection, threat detection and response, and compliance. Varonis started operations in 2005 and, as of December 31, 2018, had approximately 6,600 customers worldwide — comprised of industry leaders in many sectors including technology, consumer, retail, financial services, healthcare, manufacturing, energy, media, and education.
