Dell Incident Response Sr. Advisor (Team Echo) - SecureWorks - Remote in Houston, Texas

Security Incident Response Sr. Advisor - SecureWorks

SRC-IR Group

SecureWorks is a global leader in providing intelligence-driven information security solutions. We play an important role, as no organization in the world is immune from cyberattacks and the nature of the attack is changing every day. Internet security is a problem that will never be solved. Unlike point products that address a specific technology issue, we attack the problem holistically by analyzing threat actor tactics, techniques and procedures, and develop solutions using best-of-breed technologies to protect our clients. We are one of the best in the world at understanding the threat.

In short, we give our clients an early warning capability. SecureWorks was founded in 1999 and headquartered in Atlanta, Ga., with offices in all the major security markets around the globe. We have more than 2,000 team members, and partner with more than 4,200 clients in 59 countries to keep the bad guys out of their networks. We’ve been consistently recognized by industry analysts, readers’ polls and as a leader in the Gartner Magic Quadrant for managed security services, worldwide.

Role Overview

T he Senior Security Incident Handler is a senior level position working with clients in the growing area of managing computer security incidents. This work includes both preparing to effectively handle computer security incidents as well as actually responding to incidents. Helping clients prepare for incidents includes developing response plans, playbooks, delivering training, and conducting exercises to test response plans. Responding to incidents includes helping clients manage technical and non-technical aspects of managing response to complex, large-scale incidents; conducting detailed technical analysis to help the clients identify the scope and magnitude security incident activity, develop timelines of activity, develop remediation recommendations and plans.

This position requires up to 60% travel.

Role Responsibilities

-Serve as subject matter expert in incident response and digital forensics

-Perform complex incident response technical analysis and develop technical conclusions based on analysis of evidence; review analysis and conclusions of other consultants

-Document findings, develop incident response remediation recommendations and present both orally and in written reports for clients

-Conduct assessments of client readiness to respond to incidents, including designing and delivering incident response exercises to test client incident response plans; review the assessments of other consultants

-Develop detailed incident response plans and playbooks based on client needs

-Design and deliver incident response exercises to test client incident response plans; oversee the delivery of exercises by other consultants

-Mentor junior staff

As a managed security provider, SecureWorks expects its employees to understand and apply commonly known security practices and possess a working knowledge of applicable industry controls such as NIST 800-53. Employees will be expected to acknowledge their security responsibilities in writing prior to gaining access to company systems. Employees will be required to maintain a working knowledge of local security policies and execute general controls as assigned.


-5 to 7 years of advanced security and forensic experience with two or more major operating systems: Microsoft: 8, 8.1, 7, Vista, XP, Server, 2012, 2008, 2003, 2000; OS X; Unix; Solaris and Linux variants; iOS; Android

-Strong security analysis skills of networking data and traffic

-Strong experience with multiple forensic tools (such as Encase, FTK, X-Ways, F-Response, Volatility, Blacklight, MacQuisition, Recon)

-Operational experience with security tools (firewalls, IDS, IPS, SIEMs, proxies, VPNs)

-Understanding of vulnerabilities and tools used to discover/analyse/exploit vulnerabilities (Nessus, Nmap, Metasploit)

-Understanding of at least one Compliance Framework Experience: ISO 27001/2, FISMA, PCI, HITRUST, NIST 800-series, CoBIT.

-Strong technical communication skills (oral and written) including experience briefing executive management and desire to work with clients to solve complex security issues, including at times in crisis situations


-10 years of information security experience.

-Bachelor's degree preferred or , preferably in computer science, information systems, information assurance, or equivalent work experience

-PCI (Payment Card Industry) knowledge and experience

-Experience mentoring and leading teams of technical staff

-Technical or professional certifications, such as GCFA, CISA or CISSP, are a plus

This is a remote position.

SecureWorks is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity and/or expression, national origin, protected veteran status, disability, genetics, or citizenship status (when otherwise legally authorized to work) and will not be discriminated against on the basis of such characteristics or any other status protected by the laws or regulations in the locations where we operate. SecureWorks encourages applicants of all ages.

Job: Information Technology - Security Analysis

Organization: Security Solutions

Title: Incident Response Sr. Advisor (Team Echo) - SecureWorks - Remote

Location: TX-Houston

Requisition ID: 17000KF5

Other Locations: North America-US-Remote/Field/Satellite Office