We are conducting a nationwide search for an experienced remote Senior Incident Response Analyst based in the U.S. who will play a key role as part of the Cyber Incident Response team.
Responsibilities

• Perform tier three analysis conducting host forensics, network forensics, log analysis, and malware triage in support of incident response investigations in order to determine root cause.
• Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be applied to current and future investigations.
• Build scripts, tools, or methodologies to enhance incident investigation processes.
• Develop and present comprehensive and accurate reports, trainings and presentations for both technical and executive audiences.
• Experienced with Magnet, EnCase, FTK, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open-source forensic tools.
• Ability to communicate technical details in clear and concise terms to senior management.
• Understanding of regulatory requirements such as FTC, SEC, and other regulators for evidence management

Preferred Skills and Experience

• Must have a minimum of 8-10 years of Incident Response and Forensics experience with a min of 5 years in Cyber Defense/Information Technology.
• Extensive experience with incident response and forensics tools.
• Deep understanding of Linux, Windows, MacOS, malware analysis, host/network based forensics, memory forensics, cloud forensics and network traffic analysis.
• Experience developing scripts and automating tasks to enhance investigations
• Incident management experience both internally and with external incident response vendors

Education
B.S. or M.S. in Information Security, Computer Science, Business Administration or equivalent experiences and certifications (CISSP, GSEC, GCFE, GNFA, GC)
Ensuring a diverse and inclusive workplace where we learn from each other is core to Zoom's values. We welcome people of different backgrounds, experiences, abilities and perspectives including qualified applicants with arrest and conviction records as well as any qualified applicants requiring reasonable accommodations in accordance with the law.
We believe that the unique contributions of all Zoomies is the driver of our success. To make sure that our products and culture continue to incorporate everyone's perspectives and experience we never discriminate on the basis of race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status.
All your information will be kept confidential according to EEO guidelines.
Zoom requires all U.S. employees who will work in person at a Zoom office, attend in-person Zoom meetings or have in-person customer meetings to be fully vaccinated. Zoom will consider requests for reasonable accommodations for religious or medical reasons as required under applicable law.
Explore Zoom:

• Hear from our leadership team
• Browse Awards and Employee Reviews on Comparably
• Visit our Blog
• Zoom with us!
• Find us on social at the links below and on Instagram

#LI-REMOTE
Ensuring a diverse and inclusive workplace where we learn from each other is core to Zoom's values. We welcome people of different backgrounds, experiences, abilities and perspectives including qualified applicants with arrest and conviction records as well as any qualified applicants requiring reasonable accommodations in accordance with the law.
We believe that the unique contributions of all Zoomies is the driver of our success. To make sure that our products and culture continue to incorporate everyone's perspectives and experience we never discriminate on the basis of race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status.
All your information will be kept confidential according to EEO guidelines.
Zoom requires all U.S. employees who will work in person at a Zoom office, attend in-person Zoom meetings or have in-person customer meetings to be fully vaccinated. Zoom will consider requests for reasonable accommodations for religious or medical reasons as required under applicable law.
Explore Zoom:

• Hear from our leadership team
• Browse Awards and Employee Reviews on Comparably
• Visit our Blog
• Zoom with us!
• Find us on social at the links below and on Instagram