• Conduct forensic host, network, and application technical investigations • Triage active high-stakes security events, including reviewing and applying security controls to detect, respond, prevent and remediate threats • Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be applied to current and future investigations • Develop custom scripts, tools, or methodologies to enhance our IR processes • Develop comprehensive and accurate reports of forensic findings and IR activities for both technical and executive audiences • Effectively communicate investigative findings and strategy to various client stakeholders • Provide clients with immediate actionable 0-day cybersecurity advice to stop and mitigate the damage of ongoing attacks • Assist with the scoping of new engagements using a whole lifecycle approach, guiding the client from initial discovery through mitigation and remediation