Forensics Specialist

Forensics Specialist 

Location: We are seeking candidates that are Pacific Standard Time zone based (or open to working those hours. 

About the role

We are seeking a motivated Forensics Specialist to join our Varonis Forensics team. As a member of our elite cyber security experts, you will be at the forefront of cyber defense, leading Incident Response engagements and providing crucial support for forensic investigations.

Your contribution will be pivotal in delivering exceptional breach response services to our largest customers. You will work alongside our world-class DFIR engineering and R&D teams, contributing to product development, fortifying customer security, and establishing your presence in the cyber tech ecosystem.

If you are passionate about cybersecurity and have a background in digital forensics, incident response, and SOC operations, this is the perfect opportunity for you to make an impact and advance your career. Join us on the front lines of cyber defense and help protect our customers from the ever-evolving threat landscape.

Responsibilities

• Become an essential member of our 24x7 follow-the-sun team
• Collaborate closely with key stakeholders and customers to improve processes and products.
• Utilize the Varonis platform and operational tooling to perform high-quality analysis
• Independently lead and execute responses to high-profile cyber threat incidents in customer environments.
• Conduct threat hunting using the Varonis platform and other SOC-related tools and platforms.
• Contribute to the creation and enrichment of knowledge bases through detailed technical investigations and the discovery of new findings, and implement best practices based on these insights.
• Engage in close collaboration with our engineering team to enhance the functionality of tools and update investigation playbooks.
• Serve internally and externally as a Cyber Security Subject Matter Expert (SME) to help educate peers and customers, when required.
• Serve as the Technical Lead on engagements to guide the investigation and forensic analysis.
• Execute advanced host, network, and hyperscaler investigations to identify root cause.
• Collaborate with team members to provide best-in-class delivery outcomes for our clients.

Requirements

• 4+ years of experience working in Digital Forensics and Incident Response/SOC teams.
• Demonstrated knowledge of Windows and Linux forensic techniques, tools, and concepts.
• Proven experience executing enterprise-scale cybersecurity investigations, including ransomware, intrusion activity, and advanced persistent threats.
• Experience providing defensible containment steps based upon limited information and under time pressure.
• Tool-agnostic mentality and ability to create ad-hoc tooling to support investigations of emerging threats.
• Strong ability to work directly with clients and internal stakeholders during cyber incidents.
• Strong technical foundation in standard Information Technology concepts, languages, and services (Active Directory, SQL, KQL, OSI model, etc.).
• Experience working with multiple enterprise security solutions (e.g., SIEMs, firewalls, IDPS, AV/EDRs, IAM, DLP).
• Proven success contributing to a team-oriented environment.
• Excellent communication and interpersonal skills.
• Strong critical thinking, deductive reasoning, problem-solving, and prioritization skills.
• Capable of adapting to a fluid and dynamic schedule, ensuring coverage during hours and days beyond the standard work week.

Ways to Stand Out from the Crowd

• Experience working with common cloud technology providers (e.g., AWS, GCP, Azure).
• Experience performing Incident Response in platforms such as SalesForce, GitHub, etc.
• Experience performing Incident Response related to AI/LLM models/platforms/agents
• Relevant industry certifications(GCIH, GCFA, etc)
• Experience performing/presenting industry-relevant research

We invite you to check out our Instagram Page to gain further insight into the Varonis culture!

@VaronisLife

Varonis is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristics

#LI-Remote