Forensics Specialist
Job Description
- Experience working with common cloud technology providers (e.g., AWS, GCP, Azure).
- 2+ years of experience working in Digital Forensics and Incident Response/SOC Teams.
- Demonstrate knowledge of Windows and Linux forensic techniques, tools, and concepts.
- Strong knowledge of network architecture fundamentals (Proxies, NAT, firewalls, IDPS, DMZ, etc.) as well as common network protocols and applications (TCP/UDP, DNS, HTTP/S, etc.).
- Strong technical foundation of standard Information Technology concepts and services.
- Experience working with multiple enterprise security solutions (e.g., SIEMs, Firewalls, IDPS, AV/EDRs, IAM, DLP, etc.).
- Demonstrate proven experience in Threat Intelligence (TI) with a focus on analyzing and understanding the tactics, techniques, and procedures of known Threat Actors and Advanced Persistent Threats (APTs).
- Proven success contributing to a team-oriented environment.
- Excellent communication and interpersonal skills.
- Strong critical thinking, deductive reasoning, problem-solving, and prioritization skills.
- Be capable of adapting to a fluid and dynamic schedule, ensuring coverage during hours and days beyond the standard work week.
- Become an essential member of our 24x7 follow-the-sun global team and collaborate closely with key stakeholders and customers.
- Continuously enhancing security measures and instilling confidence by utilizing the Varonis platform, IOCs, and diverse forensic artifacts.
- Independently lead and execute responses to high-profile cyber threat incidents in customer environments.
- Work with the customer to follow up on items that require additional investigation.
- Conduct threat hunting using the Varonis platform and other SOC-related tools and platforms.
- Contribute to, and improve existing team processes while identifying new opportunities for customer impact.
- Contribute to the creation and enrichment of knowledge bases through detailed technical investigations and the discovery of new findings. Implement best practices based on these insights.
- Engage in close collaboration with our blue team engineering team to enhance the functionality of tools and update investigation playbooks.
- Serve internally and externally as a Cyber Security Subject Matter Expert (SME) to help educate peers and customers, when required.
Description
Forensics Specialist
The Company: Varonis (Nasdaq: VRNS) is a leader in data security, fighting a different battle than conventional cybersecurity companies. Our cloud-native Data Security Platform continuously discovers and classifies critical data, removes exposures, and detects advanced threats with AI-powered automation.
Thousands of organizations worldwide trust Varonis to defend their data wherever it lives — across SaaS, IaaS, and hybrid cloud environments. Customers use Varonis to automate a wide range of security outcomes, including data security posture management (DSPM), data classification, data access governance (DAG), data detection and response (DDR), data loss prevention (DLP), and insider risk management.
Varonis protects data first, not last. Learn more at www.varonis.com.
The Role: We are seeking a motivated Forensics Specialist to join our Varonis Forensics team. As a member of our elite cyber security experts, you will be at the forefront of cyber defense, taking charge of Incident Response engagements and providing crucial support for forensic investigations. Your contribution will be pivotal in delivering exceptional response and forensics services to our largest customers. You will work alongside our world-class blue team engineering and R&D teams, contributing to product development, fortifying customer security, and establishing your presence in the cyber tech ecosystem.
If you are passionate about cybersecurity and have a background in digital forensics, incident response, and SOC operations, this is the perfect opportunity for you to make an impact and advance your career. Join us on the front lines of cyber defense and help protect our customers from the ever-evolving threat landscape.
The Requirements:
- 2+ years of experience working in Digital Forensics and Incident Response/SOC Teams
- Demonstrate knowledge of Windows and Linux forensic techniques, tools, and concepts
- Strong knowledge of network architecture fundamentals (Proxies, NAT, firewalls, IDPS, DMZ, etc.) as well as common network protocols and applications (TCP/UDP, DNS, HTTP/S, etc.)
- Strong technical foundation of standard Information Technology concepts and services
- Experience working with multiple enterprise security solutions (e.g., SIEMs, Firewalls, IDPS, AV/EDRs, IAM, DLP, etc.)
- Demonstrate proven experience in Threat Intelligence (TI) with a focus on analyzing and understanding the tactics, techniques, and procedures of known Threat Actors and Advanced Persistent Threats (APTs).
- Proven success contributing to a team-oriented environment
- Excellent communication and interpersonal skills
- Strong critical thinking, deductive reasoning, problem-solving, and prioritization skills
- Experience working with common cloud technology providers (e.g., AWS, GCP, Azure) is an advantage
- Be capable of adapting to a fluid and dynamic schedule, ensuring coverage during hours and days beyond the standard work week
The Responsibilities:
- Become an essential member of our 24x7 follow-the-sun global team and collaborate closely with key stakeholders and customers.
- Continuously enhancing security measures and instilling confidence by utilizing the Varonis platform, IOCs, and diverse forensic artifacts.
- Independently lead and execute responses to high-profile cyber threat incidents in customer environments
- Work with the customer to follow up on items that require additional investigation.
- Conduct threat hunting using the Varonis platform and other SOC-related tools and platforms
- Contribute to, and improve existing team processes while identifying new opportunities for customer impact
- Contribute to the creation and enrichment of knowledge bases through detailed technical investigations and the discovery of new findings. Implement best practices based on these insights
- Engage in close collaboration with our blue team engineering team to enhance the functionality of tools and update investigation playbooks
- Serve internally and externally as a Cyber Security Subject Matter Expert (SME) to help educate peers and customers, when required
We invite you to check out our Instagram Page to gain further insight into the Varonis culture!
@VaronisLife
Varonis is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristics
#LI-Remote
