Coalition is the world's first Active Insurance provider designed to help prevent digital risk before it strikes. Founded in 2017, Coalition combines broad insurance coverage with a digital risk assessment and continuous security monitoring to help organizations protect themselves in today’s hyper-connected world.
Opportunities to make an impact with bold thinking are real - and happening daily.
Responsibilities
- Work under the direction of IR lead and outside counsel to conduct IR investigations
- Fulfill client requests and resolve incidents received via e-mail or internal ticketing systems in a timely and detail-oriented manner
- Manage all client interactions professionally with a strong emphasis on client satisfaction
- Analyse and assess security incidents and escalate to appropriate internal teams for additional assistance
- Triage and scope incidents for prospective clients to understand the DFIR objectives and magnitude of effort involved to satisfy objectives
- Provide strategic, relevant, and achievable recommendations to help advance the security posture of organisations during and after an incident
- Communicate effectively with clients (executives and IT) on the topics of incident type, remediation, forensics and analysis
- Perform host and network-based forensics across Windows, Mac, and Linux platforms as well as cloud environments
- Deliver high-quality written and verbal reports, recommendations, and findings to key stakeholders including clients and legal counsel
- Participate in, or work directly on additional projects, assignments, or initiatives as required
- Mentor and coach team members and work effectively as part of team unit
- Develop, evaluate and utilise novel methods to hunt for indicators of compromise and perform analysis across large sets of data
- Assist in the development of internal guidelines, playbooks and knowledge base
- Demonstrate industry thought leadership through blog posts and occasional public speaking events
Skills and Qualifications
- 3-5 years of professional experience (2 years directly related to IR or functional area) or equivalent combination of education and experience
- Bachelor's degree in digital forensics, cybersecurity, computer science, information systems or similar field
- Working as part of a team in a remote matrixed consulting environment
- Incident Response: conducting or managing IR investigations for organizations, responding to opportunistic and targeted threats such as
- BECs, FTFs, ransomware and APTs
- Digital Forensic Analysis: a background in using different forensic analysis tools in incident response investigations to determine the extent and scope of compromise and possessing creativity and logic in approaching complex forensic problems
- Incident Remediation: strong knowledge of opportunistic and targeted attacks and ability to generate customized strategic and tactical remediation plans for clients
- Network Forensic Analysis: strong knowledge of networking protocols, network analysis tools, and ability to perform analysis of associated network logs
- SOC and EDR: experience with EDR solutions and leveraging detections and analytics to mitigate threats appropriately
- Possessing an understanding of secure network architecture and a strong knowledge of networking fundamentals
- Cloud Incident Response: knowledge in AWS, Azure, GCP incident response strategies
Additional Requirements
- Excellent problem-solving skills with the ability to diagnose and troubleshoot technical issues
- Customer oriented with a strong interest in client satisfaction
- Ability to learn new technologies and concepts quickly, and comfortable using command-line interfaces
- Capable of leading teams of highly motivated analysts
- Communicate highly technical information to a non-technical audience
- Ability to handle and work with clients through high stress situations
- Proficiency in project management
- Foster a positive work environment and attitude
- Flexibility with your work schedule in times of urgent response needs
- Contribute to thought leadership within the DFIR industry
Bonus Skills
- GCIH, GCIA, GCFA, GCFE, ACE, EnCE, CFCE, CISSP, or similar
Compensation
Our compensation reflects the cost of labor across several US geographic markets. The US base salary for this position ranges from $122,000/year in our lowest geographic market up to $161,000/year in our highest geographic market. Consistent with applicable laws, an employee's pay within this range is based on a number of factors, which include but are not limited to relevant education, skills, job-related knowledge, qualifications, work experience, credentials, and/or geographic location. Your recruiter can share more on target salary for your location during the interview process. Coalition, Inc. reserves the right to modify this range as needed.
Perks
- 100% medical, dental and vision coverage
- Flexible PTO policy
- Annual home office stipend and WeWork access
- Mental & physical health wellness programs (One Medical, Headspace, Wellhub, and more)!
- Competitive compensation and opportunity for advancement
We’re a remote-first, mission-driven team committed to building a more inclusive culture with people of all different backgrounds. We trust our team members to take responsibility, share ownership, and put in the work to help us in our pursuit to solve digital risk.
Coalition’s exceptional growth stems from its ability to address real-world problems for organizations of all sizes and remain true to our founding values of character, humility, responsibility, purpose, authenticity, and inclusion.
We’re always looking for collaborative, inquisitive individuals to join #OurCoalition.
Visit our Newsroom >
Privacy Notice
Coalition is committed to protecting your privacy and handling your personal information responsibly. We collect, use, and store personal information as necessary for the recruitment process and in compliance with applicable privacy laws and regulations in all regions where we operate. We want you to understand what personal information we collect, how we use it, and your rights regarding access, correction, and deletion of your data where applicable. Information submitted, collected, and processed as part of your application is subject to Coalition's Privacy Policy. For further details, please review our full Privacy Policy or contact us with any questions regarding how your information is handled.
Our Privacy Policy >
Anti-Discrimination Notice
Coalition is proud to be an Equal Opportunity employer. Our policy is to provide equal employment opportunities to all individuals, without discrimination or harassment on the basis of any characteristic protected by applicable laws in each country where we operate. This commitment includes, but is not limited to, ensuring equal treatment in recruitment, selection, training, promotion, transfer, compensation, and all other aspects of employment. Coalition does not tolerate discrimination or harassment of any kind, and we are dedicated to fostering an inclusive and supportive workplace.
Accommodations
Coalition is committed to providing reasonable accommodations to qualified individuals with disabilities, including applicants and employees, in accordance with applicable laws and regulations in each country where we operate. Our policy is to support equal opportunity in the hiring process by considering qualified applicants regardless of disability or other protected characteristics, unless providing accommodation would impose an undue hardship or disproportionate burden. If you require accommodation to complete an application, interview, pre-employment testing, or participate in the selection process, please contact us at [email protected]. We also consider all qualified applicants, including those with criminal histories, in line with applicable laws and regulations in each jurisdiction.
To all recruitment agencies: Coalition does not accept unsolicited agency resumes. Do not forward resumes to our email alias, employees, or other physical or virtual organization locations. Coalition is not responsible for any fees related to unsolicited resumes.
Top Skills
What We Do
Coalition is the leading provider of cyber insurance and security, combining comprehensive insurance and proactive cybersecurity tools to help businesses manage and mitigate cyber risk. Coalition’s unique product offerings combine best-in-class insurance and proactive cybersecurity tools to help keep businesses safe.
