Job Description

Vice President, Digital Forensics and Incident Response - Cybersecurity OperationsVice President, Digital Forensics and Incident Response ('DFIR') will be required to conduct digital forensic investigations in support of HR/ER, Legal investigations, Compliance, Cybersecurity, and Global Security. Additionally, DFIR is responsible for examining post-exploitation artifacts across JPMC digital assets with a focus toward extracting and sharing Indicators of Compromise ('IoCs') or details of control gaps in support of live incidents, post-incident investigations, or internal investigations. A successful candidate will have a proven track record of independently handling large scale, complex post-incident investigations, where techniques such as advanced network forensics, malware reverse engineering, log analysis, timeline creation, and host-based forensics have been applied.This position will require work in the office a minimum of 60% of the time.RESPONSIBILITIES:Some, but not all, of the diverse experience expected from a candidate for this position would include the following: Demonstrate a deep understanding of digital forensic tools and techniques used to support internal fraud and employee investigations. Use of host-based and network forensic capabilities to develop information regarding IOCs and TTPs for threat actors and malware, which can be shared amongst other internal teams. Leverage practical experience to develop methodologies for proactive hunting of threat actors in the absence of alerting or rules-based appliances. Conduct detailed analysis of systems where breaches of critical IT infrastructure may have occurred and provide root cause analysis, impact assessments and rapid response to aid detection of those responsible and make recommendations to assist prevention of similar incidents. Experience preparing in-depth investigation reports into forensic investigations, breach reports, privacy incidents and data exposure type cases. Assisting with the development of in-house training programs to ensure world class high-tech investigation standards. Demonstrate strong written and verbal communication skills necessary to effectively interpret investigative requirements, provide technical guidance, and provide detailed documentation of analysis findings. Qualifications Bachelor's Degree in Computer Science or other Technology related field preferred. 7+ years of experience working in the computer forensics, cybercrime investigations, and other related technical fields with a combination of both public and private sector experience preferred. Expert knowledge of computer forensic best practices and industry standard methodologies for investigating host-based and network analysis. A proven track record in live digital forensics, log-file analysis and network forensics. Experience with malware reverse engineering is a plus. Experience with investigating data compromise events. Experience with networking protocols and packet analysis. Experience working with industry standard tools (X-Ways, EnCase, Volatility, Rekall, Wireshark, SIFT, Cellebrite, etc.) Ability to automate tasks using a scripting language (Python, Perl, Ruby, Bash, etc.) is a plus. Able to work independently and/or with a team to conduct forensic examinations. Able to articulate and visually present complex forensic investigation and analysis results. Strong attention to detail in conducting forensic analysis combined with an ability to accurately record full documentation in support of the investigation. The ability to coordinate, work with and gain the trust of business stakeholders to achieve a desired objective. Industry standard digital forensics certifications (GCFA, GNFA, GCFE, CFCE, etc.) are a plus. Industry standard information security technology certifications (GCIH, GREM, etc.) are a plus. Memberships and participation in relevant professional associations. Able to work under pressure in time critical situations. Excellent written and verbal communication skills are required. Ability to communicate effectively with business representatives in explaining forensic findings clearly and where necessary, in non-technical terms.

Job Tags

Similar Jobs