Principal Consultant, Cloud DFIR, Reactive Services (Unit 42) - Remote

Your CareerThis role is client-facing and requires the Principal Consultant to lead and produce deliverables based on reactive services client engagements.  The Principal Consultant will work directly with multiple customers and key stakeholders (Admins, C-Suite, etc) to drive the security priorities of the Cloud Platforms (Azure, AWS, GCP) and Cloud Related Applications/Services (CASB).Your ImpactPerform reactive incident response functions in public cloud environments, primarily Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and AliCloudExamine compute, storage, IAM, network traffic, serverless, and other log sources to identify evidence of malicious activityInvestigate data breaches leveraging traditional forensic tools, cloud-specific tools, and custom Unit 42 techniques to determine the source of compromises and malicious activity that occurred in client environmentsManage incident response engagements to scope work, guide clients through forensic investigations, contain security incidents, and provide guidance on longer term remediation recommendationsAbility to perform travel requirements as needed to meet business demands (on average 20%)Mentorship of team members in incident response and forensics best practices