Contract Spy
United Kingdom
About the job
Outbreach is building the bench of DFIR practitioners who do the forensic work inside a live incident, from evidence acquisition through to the report the client, their insurer and their lawyers rely on.
You would be the person who acquires the evidence, works out what actually happened, and writes the account of it that the client, their insurer, their lawyers and sometimes a regulator will rely on. Our incidents are mid market and fast moving: ransomware, business email compromise, data theft and insider cases. You would work alongside an Incident Manager who owns the client relationship, so your time goes on the technical investigation rather than on running the crisis.
Key Responsibilities
Acquire evidence properly and defensibly across endpoints, servers, memory, network and cloud, with chain of custody that stands up later.
Triage at speed under pressure, and separate what is known, what is suspected and what is not yet established....