The Forensic Intern will work and learn the processes, approach, and methodology to perform investigations of Business Email Compromise and Ransomware matters. The role of the Associate Forensic Analyst is to Forensic intern will work with the Forensic team members analysts on the Tiger Teams to learn and perform triage level analysis of the collected images, data, and available logs (e.g. SentinelOne, Firewall Logs, DLP Logs, etc.) and more deep dive advanced analysis under the direction and guidance of the Senior Analysts and Forensic Lead. The Forensic intern will work Associate Forensic Analyst should work to help develop the narrative and story in conjunction with the Tiger Team members under the direction of the Forensic Lead or Senior Analysts. The Digital Forensics & Incident Response (DFIR) team works together to support Clients and help restore business operations during an incident through the identification of threat actor behavior and activity.
The Forensic Intern is a temporary role working to learn and understand DFIR delivery with an chance to advance to a full-time Associate Forensic Analyst role supports the Forensic Lead and Tiger Team on responsible for assisting the team with delivery of active Ransomware, Investigations, and Business Email Compromise projects assigned to the respective Tiger Team starting with.
ROLES & RESPONSIBILITIES
- With guidance, performs digital forensic analysis on Windows, Apple Mac, and Linux based operating systems, including the analysis of email log files, and log files for networking appliances including but not to, VPN and firewall appliances.
- Ability to leverage forensics tools including Encase, FTK, X-Ways, Axiom and other custom investigation tools to identify malicious activity that occurred within client environments
- The candidate should be able to performs forensic analysis with guidance on:
- Host-based systems including Windows and Mac OS X to identify indicators of threat actor activi