Responsibilities

Perform tier three analysis conducting host forensics, network forensics, log analysis, and malware triage in support of incident response investigations in order to determine root cause.

Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be applied to current and future investigations.

Build scripts, tools, or methodologies to enhance incident investigation processes.

Develop and present comprehensive and accurate reports, trainings and presentations for both technical and executive audiences.

Experienced with EnCase, FTK, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open-source forensic tools.

Ability to communicate technical details in clear and concise terms to senior management.

Ability to lead incident response engagements and coordinate actions of other incident response analysts

Understanding of regulatory requirements such as FTC, SEC, and other regulators for evidence management

Preferred Skills and Experience

Must have a minimum of 10 years of Incident Response and Forensics experience with a min of 5 years in Cyber Defence/Information Technology.

Extensive experience with incident response and forensics tools.

Deep understanding of Linux, Windows, malware analysis, host/network based forensics, memory forensics, cloud forensics and network traffic analysis.

Experience developing scripts and automating tasks to enhance investigations

Incident management experience both internally and with external incident response vendors

Education

Ensuring a diverse and inclusive workplace where we learn from each other is core to Zoom’s values. We welcome people of different backgrounds, experiences, abilities and perspectives including qualified applicants with arrest and conviction records as well as any qualified applicants requiring reasonable accommodations in accordance with the law.

We believe that the unique contributions of all Zoomies is the driver of our success. To make sure that our products and culture continue to incorporate everyone's perspectives and experience we never discriminate on the basis of race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status.

All your information will be kept confidential according to EEO guidelines.

#LI