Forensics Analyst - Information Security, Incident Response

Company Description

Company Overview

Publicis Groupe is the largest Communications Group worldwide and the leader in Digital and Interactive Communications. Publicis has activities spanning 108 countries on five continents and employs approximately 72,000 professionals worldwide. Publicis Groupe offers local and international clients a complete range of communication services through the nearly 1,400 agencies across our four global networks, including:

Publicis Re:Sources 

Re:Sources is the shared services provider of Publicis Groupe, delivering a suite of multi-tenant managed and professional services to Publicis Groupe agencies worldwide, in support of key Groupe business operations. Those operations include: Information Technology & Technology Solutions, Finance, Legal, Procurement, Real Estate, Insurance and other services to our business units."

Overview

Summary:

Job Description

The Senior Associate, Information Security - Forensics is part of a global team and is responsible for incident response of cyber security incidents that are associated with our businesses, clients, and vendors; is technically skilled and ensures incident containment, remediation, and closure. This individual will be expected to work closely with the legal, data privacy, business, and client teams. They should be comfortable with interacting with senior executives including C-level staff.

Responsibilities

Responsibilities

• Lead investigation of cyber security incidents of higher severity
• Analyze compromised/potentially compromised systems
• Coordinate evidence/data gathering and document security incident reports
• Manage, review and present written and oral reports in a pertinent, concise, and accurate manner for distribution to management
• Maintain security processes such as application security, vulnerability management and incident response
• Maintain current knowledge of tools and best practices in advanced persistent threats, tools, techniques, procedures of attackers, forensics, and incident response
• Perform complex forensic investigations into system breaches, data leaks, and system weaknesses
• Provide technical expertise to staff on security incident monitoring, triage, response, threat & vulnerability management, and security analysis
• Provide strategic direction on types of Incident Management activities that will drive efficiencies across company

Qualifications

Qualifications

• 4 or more years of experience in an analytical role of either forensics analyst (Linux, Windows, or MacOS), threat analyst, incident response or security engineer/ consultant
• Experience on forensic investigation tools such as: FTK, EnCase, Sleuthkit
• Experience with cloud environment such as: Azure, AWS, GCP
• Familiarity with the MITRE ATT&CK or related frameworks
• Experience developing and managing incident response programs
• Proficient in EDR - CrowdStrike and/or SentinelOne
• Proficient in social engineering, phishing, and related fraud schemes.
• Understanding of real-world exploits work, how offensive attackers laterally move between internal systems and to establish persistence
• Strong general knowledge of security concepts and expertise in network and web application security issues
• Experience with a scripting language such as Python, Bash, PowerShell, or other scripting language in an incident handling environment

Soft Skills:

• Strong communication (written and oral) and customer interaction skills
• Able to use independent judgement to plan, prioritize and organize a diversified workload
• Excellent teamwork ability in a fast-paced and global work environment.

Additional Information

Publicis Canada is committed to building a diverse workforce representative of our community. We encourage and are pleased to consider all qualified candidates, without regard to race, colour, citizenship, religion, sex, marital / family status, sexual orientation, gender identity, aboriginal status, age, disability or persons who may require an accommodation, to apply.  If you require a specific accommodation please contact Human Resources.