Rapid7 Incident Response Consultant 

Czechia, Prague, Prague 

493497129

About the Role

In this role, you will:

• Lead and support incident response engagements, from detection and containment through forensic analysis and remediation, while partnering with Incident Responders, MDR Analysts, and Customer Advisors

• Support proactive incident response service engagements, including compromise assessments and incident simulations

• Utilize Rapid7 technologies like InsightIDR and Velociraptor to deliver positive customer outcomes

• Deliver verbal and written updates and forensic reports to customers

• Assist in capturing and deploying knowledge of latest attacker methodologies with members of our Managed Threat Operations team and as part of Rapid7’s Emergent Threat Response program

• Ensures all security incidents are tracked and documented appropriately.

• Collaborate with peers and cross-team partners on process enhancements and documentation

• Participate in pre-sales conversations with prospective customers, Sales enablement sessions, webinars, and other business development opportunities

• Advise and mentor members of our MDR SOC and Managed Threat Operations teams

The skills you’ll bring include:

• 1-2 years of hands-on incident response experience

• 2-3 years of security analyst experience, preferably in a SOC or MSSP setting

• Strong technical experience in three of the five areas below

  • Host forensics (Windows / Mac / Linux)

  • Network traffic analysis

  • Log Review

  • Malware triage

  • Cloud technologies, including AWS, Azure, and GCP

• Strong verbal and written communication skills, in particular the ability to effectively communicate investigation findings and associated mitigation and remediation actions to technical and non-technical audiences

• Strong time management and prioritization skills in fast-paced situations

• Desire to continuously learn and grow from your peers and on the job experiences, with a willingness to share your knowledge

• Relevant industry certifications, such as, but not limited to: GCIA, GCIH, GDAT, GCFE, and GFCA

Here, we’re building a dynamic workplace where everyone can have the career experience of a lifetime. We challenge ourselves to grow to our full potential. We learn from our missteps and celebrate our victories. We come to work every day to push boundaries in cybersecurity and keep our 11,000+ global customers ahead of whatever’s next.