GSOC Senior Cyber Forensics Manager - DFIR (100% REMOTE)

Company Description

Experian is the world’s leading global information services company, unlocking the power of data to create more opportunities for consumers, businesses and society. We are thrilled to share that FORTUNE has named Experian one of the 100 Best Companies to work for. In addition, for the last five years we’ve been named in the 100 “World’s Most Innovative Companies” by Forbes Magazine. 

Job Description

ABOUT US

The Digital Forensics and Incident Response (DFIR) team is responsible for supporting Experian’s Global Business units by providing digital forensic services in support of investigations of cyber security incidents, violation of company policies, and fraud & abuse. The DFIR Team reports to the Senior Director of Forensics and Incident Response as a function of the Experian Global Security Office.

The Senior Cyber Forensic Manager is responsible for managing and overseeing the daily operations of a global team of experienced Digital Forensic Examiners, ensuring best practices and methodologies are followed during the preservation, collection, and analysis of electronically stored information (ESI) using the latest forensic technology and methodologies within a global enterprise environment. This individual will also be responsible for supervising the maintenance and operations of global digital forensic labs, all phases of evidence management, continuously mentoring and training staff to develop team capabilities & skillsets and maintenance of the forensic tools & technologies.

This individual will regularly work with key stakeholders in Experian’s global business lines and support the strategies of the Director of Digital Forensics & Incident Response and the Chief Information Security Officer. This position reports to the Director of Forensics & Incident Response.

KEY RESPONSIBILITIES:

• Responsible for the day to day operations of Experian’s global Digital Forensics program. This includes regular review & maintenance of forensic processes & procedure documentation, final review of forensic reports & deliverables, evidence management procedures, team development & training roadmaps, and regularly reporting performance metrics.
• Responsible for supervising team preservation and processing of ESI data from a variety of platforms and sources; including laptops, desktops, servers, cloud sources, mobile devices, and storage media in a manner that follows industry best practices and maintains forensic integrity.
• Maintain and progress the team’s development and training, ensuring the team maintains pace with the industries best practices, methodologies, and technologies.
• Establish and maintain excellent working relationships with stakeholders, management, and infrastructure support teams throughout the global organization.
• Coordinate Forensic Response to Moderate or Major Cyber Security Incidents in accordance with the Experian’s Global Cyber Incident Response Plan.
• Participate in external client audits, internal audits, and regulatory reviews as subject matter expert for Experian’s Digital Forensics and Incident Response program.
• Provide Advanced Forensic and Analytical support as needed.
• Ensure all case documentation, reporting, and deliverables meet defined standards and quality of work.
• Ability to work hours or shifts outside of normal work hours and travel when supporting major security incidents, high priority investigations, management meetings, and training.
• Responsible for leading a globally dispersed and remote team of highly technical security professionals.

Qualifications

• Bachelor’s Degree in Computer Science, Computer Engineering, Information Security, Criminal Justice, or a related field. Minimum 5 years or more experience working within a Digital Forensic and Incident Response Teams, Law Enforcement, and/or Military experience may be accepted in lieu of this requirement.
• A minimum of 8 years or equivalent of information security experience, specializing in Digital Forensics (including Windows disk forensics, Unix & Linux disk forensics, memory forensics, cloud forensics, and static & dynamic malware analysis)
• A minimum of 4 years previous experience leading a technical team of Digital Forensics experts. 
• Currently maintaining two or more professional certifications related to Digital Forensics or Incident Response (e.g., GCFE, GCFA, GREM, EnCe, MCFE, CFCE). Management Certifications (CISSP, CISM) are a plus.
• Proficiency in forensic investigation techniques using a variety of commercial and open source digital forensic tools (e.g., AXIOM, EnCase, FTK, X-Ways, SANS SIFT Workstation, NUIX, etc.)
• Experienced with supervising complex Incident Response and Forensic