Saatchi & Saatchi

Senior Associate, Information Security - Forensics

Saatchi & Saatchi$100K — $120K *
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • 5+ years in a forensic, threat analysis, or incident response role.
  • Hands-on experience with EDR solutions like CrowdStrike or SentinelOne.
  • Proficient in using forensic tools such as FTK and EnCase for digital investigations.
  • Familiarity with major cloud environments (AWS, Azure, GCP) and their security logs.
  • Understanding of MITRE ATT&CK framework and its application in incident response.
  • Experience in developing incident response protocols, emphasizing efficiency and automation with AI.
  • Strong written and verbal communication skills, capable of explaining complex technical details to stakeholders.

Responsibilities

  • Lead incident response as the Incident Commander during cyber security events.
  • Utilize forensic tools to analyze compromised systems for breach evidence.
  • Coordinate the collection and documentation of data related to security incidents.
  • Create and present detailed incident reports to management stakeholders.
  • Stay updated on best practices in forensics and current cyber threat tactics.
  • Conduct thorough forensic investigations on data breaches and system vulnerabilities.
  • Offer guidance and training to team members on incident monitoring and response processes.

Benefits

  • Opportunity to work in a globally recognized security team.
  • Collaboration with cross-functional teams and direct interaction with C-level executives.
  • Focus on continuous learning with up-to-date tools and methodologies.
  • Ability to influence incident management processes with innovative AI solutions.
Full Job Description
Overview

The Senior Associate, Information Security - Forensics is part of a global team and is responsible for incident response of cyber security incidents that are associated with our businesses, clients, and vendors; is technically skilled and ensures incident containment, remediation, and closure. This individual will be expected to work closely with the legal, data privacy, business, and client teams. They should be comfortable with interacting with senior executives, including C-level staff.

Responsibilities

  • Incident Commander to lead investigation and response of cyber security incidents.
  • Analyze compromised/potentially compromised systems utilizing forensics tools.
  • Coordinate evidence/data gathering and document security incident reports.
  • Manage, review, and present written and oral reports in a pertinent, concise, and accurate manner for distribution to management.
  • Maintain current knowledge of tools and best practices in advanced persistent threats, tools, techniques, procedures of attackers, forensics, and incident response.
  • Perform complex forensic investigations into system breaches, data leaks, and system weaknesses.
  • Provide technical expertise to staff on security incident monitoring, triage, response, threat & vulnerability management, and security analysis.
  • Provide strategic direction on types of Incident Management activities that will drive efficiencies across company, including automation with AI tools.

Qualifications

  • EDR Experience- CrowdStrike and/or SentinelOne with experience investigating and analyzing malware and other malicious activity.
  • Experience with forensics tools such as FTK, EnCase, Autopsy to collect and analyze file system artifacts, process history, application artifacts, memory collection and analysis for physical and cloud systems (Windows, Mac, Linux).
  • 4 or more years of experience in an analytical role of either forensics analyst (Linux, Windows, or MacOS), threat analyst, incident response, SOC analyst, or security engineer/ consultant.
  • Experience with cloud environments such as: Azure, AWS, GCP - knowing how to collect and analyze logs from Guard Duty/ Defender and CloudTrail, etc.
  • Familiarity with the MITRE ATT&CK or related frameworks.
  • Experience developing and managing incident response programs with focus on efficiency through AI development.
  • Strong communication skills with confidence leading Incident Response calls with different stakeholders; followed by producing detailed incident reports.
  • Proficient in social engineering, phishing, and related fraud schemes.
  • Strong general knowledge of security concepts and expertise in network and web application security issues.
  • Experience with a scripting language such as Python, Bash, PowerShell, or other scripting language in an incident handling environment.

Salary Range: $100-120K/yr

#LI-DS1

About Saatchi & Saatchi

Saatchi & Saatchi is a global advertising agency headquartered in New York City. The company was founded in London in 1970 by brothers Maurice and Charles Saatchi and is now part of the Publicis Groupe, a French multinational advertising and public relations company. Saatchi & Saatchi has over 6,000 employees in 114 countries and provides a range of advertising and marketing services to clients in various industries, including automotive, consumer goods, financial services, and telecommunications. The company is known for its creative and innovative advertising campaigns, including the iconic 'Nothing is Impossible' campaign for Toyota. Saatchi & Saatchi has won numerous awards for its work, including Cannes Lions, Clios, and Effies.
Learn more about Saatchi & Saatchi
Size
6,000 employees
Industry

Similar Jobs

More Jobs at Saatchi & Saatchi

More Information Technology Jobs

Find similar Senior Associate, Information Security - Forensics jobs: