Pondurance

Lead forensic investigations and support clients through incident response, remediation, and recovery efforts. | Significant forensic and incident response experience with strong systems or network administration background, client-facing skills, and scripting abilities. | Senior Incident Response Consultant REMOTE About the Role At Pondurance, we help organizations detect, respond to, and recover from cyber threats with confidence. Our Digital Forensics & Incident Response (DFIR) team partners with clients during some of their most critical moments, guiding them through investigation, containment, remediation, and recovery. We are seeking a senior-level incident response professional with a strong systems or network administration background who can support both forensics and remediation efforts. As a Senior Incident Response Consultant, you will lead the forensic investigation while also supporting clients through rebuild and recovery efforts. The team is specifically looking for someone with experience in systems or network administration who can serve as a subject matter expert during forensic and remediation efforts, working closely alongside client IT teams during the process. Responsibilities • Conduct forensic host, network, and application technical investigations • Triage active high-stakes security events, including reviewing and applying security controls to detect, respond, prevent, and remediate threats • Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be applied to current and future investigations • Develop custom scripts, tools, or methodologies to enhance our IR processes • Prepare comprehensive and accurate reports of forensic findings and IR activities for both technical and executive audiences • Communicate investigative findings and strategy to various client stakeholders • Provide immediate, actionable guidance to contain and mitigate ongoing attacks • Assist in scoping new engagements and guide clients through the full incident response lifecycle • Work directly with client IT teams to support rebuild, reconfiguration, and remediation efforts • Remotely guide clients through EDR deployments, system configuration changes, and technical recovery steps • Support the full incident response lifecycle from discovery through reporting • Participate in an on-call rotation to provide after-hours and weekend incident response support as needed Technologies • Windows operating systems and networking protocols • Active Directory administration and recovery • Virtualization technologies such as HyperV and VMware ESXi • Disk and memory forensics • Network traffic analysis • Experience with EDR platforms such as CrowdStrike, SentinelOne, or Huntress • Experience with forensic toolsets such as FTK, AXIOM, KAPE, or similar • Scripting experience using PowerShell, Python, or similar Knowledge and Skills • Significant experience in a forensic and incident response role • Strong background in systems or network administration • Hands-on experience with Active Directory administration and troubleshooting • Experience responding to ransomware or complex security incidents • Ability to work directly with clients in high-pressure situations • Demonstrated ability to analyze incidents and recommend effective remediation and countermeasures • Experience in a technical consulting or client-facing role • Preferred certifications include GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), MCFE, EnCE or equivalent credentials If you have other combinations of relevant skills and experience that you expect make you the right candidate for this role, please let us know! Who we are At Pondurance, we embrace, educate, and protect people by helping make our world a better and safer place. We believe in inviting good people into our company who are driven to become great! Every person at Pondurance is encouraged to focus and grow in their individual areas of interest, passion, and career path. We have accessible leaders as Mentors who believe “None of us are as smart as all of us” (R. Pelletier). We believe everyone has the freedom to be themselves, especially at work, and so we embrace, support, and celebrate each other. Each one of us influences our company’s direction through speaking up; you have a voice, and we want you to use it. Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape. What We Offer The opportunity to apply your expertise, take on new challenges, and help customers address their biggest security objectives. An inclusive culture of teamwork that embraces the diversity of our people and communities in which we work. Some of the corporate benefits (there are more) for full-time employees include: • Medical, dental, vision, disability, FSA, HSA, life, and AD&D insurance, 401(k) Plan. • Time off: PTO, sick, holiday, & parental leave details are available • Money: We provide competitive compensation packages based on the market and your overall credentials. Although this is a remote role, if you live close by, you’ll have access to our office in McLean, VA. To promote a healthy and safe work community, we require background and drug screenings as part of our hiring process. Details of our process will be provided upon request. We are an equal opportunity employer focused on celebrating diversity and inclusion. We believe that each individual should be treated equally without regard to race, color, identity, national origin, protected veteran status, religion, sex, including sexual orientation and gender identity, disability, or any other characteristic protected by law.

Own and evolve CI/CD pipelines and infrastructure while developing backend services for an AI-driven platform and collaborating with cross-functional teams to ensure system reliability. | Strong experience in Python production systems, CI/CD pipelines, infrastructure-as-code tools, Linux environments, serverless architectures, and container orchestration. | Senior Platform Engineer REMOTE About the Role: As a Senior Platform Engineer, you will play a key role in supporting and enhancing our AI-driven backend systems while delivering and maintaining our core MDR data pipeline. This role blends platform engineering (CI/CD, infrastructure, deployment systems) with backend development for our AI platform. You’ll be part of a small, highly cross-functional team and will contribute across multiple areas, balancing hands-on development with platform ownership and reliability. Responsibilities: Own and evolve CI/CD pipelines using GitHub Actions, Terraform, and Nomad, including deployment of containerized services and AWS serverless components (e.g., Lambda) Develop and enhance our growing AI platform Own self-service deployment mechanisms for our platform frontend using GitHub Actions and Nomad Collaborate with Front-End and Operations teams to define and deliver the roadmap for the AI platform Manage configuration using Salt and HashiCorp tools Oversee Docker-based systems to ensure reliable deployment and operation of applications Maintain uptime and functionality of primary pipeline Implement monitoring, alerting, and dataflow solutions using Datadog to proactively detect and resolve issues Document processes, procedures, and troubleshooting steps to improve team efficiency and knowledge sharing Provide secondary support to client-facing support teams on client device issues Participate in on-call rotations, root cause analysis (RCA), and continuous improvement efforts Technologies: Python (backend services, APIs, data pipelines) GitHub Actions, Terraform (CI/CD and infrastructure-as-code) AWS (Lambda, serverless architecture) Docker, Nomad (containerization and orchestration) Datadog (monitoring and observability) Linux environments Salt, HashiCorp tools Knowledge and Skills: Strong experience developing production systems in Python (services, APIs, or data pipelines) Experience working with CI/CD pipelines and infrastructure-as-code tools (e.g., GitHub Actions, Terraform) Ability to work effectively in Linux-based environments and troubleshoot production systems Familiarity with serverless architectures and AWS services such as Lambda (or equivalent) Strong communication and documentation skills, especially in cross-functional settings Ability to take ownership of work, prioritize effectively, and operate independently Experience working on production systems with a focus on reliability and minimizing client impact Demonstrated ability to work across both development (e.g., Python) and platform/infrastructure domains Nice to Haves: Familiarity with AI-assisted and agentic development workflows to improve engineering velocity and code quality Experience with container orchestration (Nomad, Kubernetes, Docker Compose) Experience with monitoring and observability tools such as Datadog Familiarity with configuration management tools (e.g., Salt, HashiCorp stack) Experience working in environments with on-call responsibilities and production support Familiarity with tools like Jira, Slack, and Google Workspace Who we are: At Pondurance we embrace, educate, and protect people by helping make our world a better and safer place. We believe in inviting good people into our company who are driven to become great! Every person at Pondurance is encouraged to focus and grow in their individual areas of interest, passion, and career path. We have accessible leaders as Mentors who believe “None of us are as smart as all of us” (R. Pelletier). We believe everyone has the freedom to be themselves, especially at work and so we embrace, support, and celebrate each other. Each one of us influences our company’s direction through speaking up, you have a voice and we want you to use it. Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape. What We Offer: The opportunity to apply your expertise, take on new challenges, and help customers address their biggest security objectives. An inclusive culture of teamwork that embraces the diversity of our people and communities in which we work. Some of the corporate benefits (there are more) for full-time employees include: Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance, 401(k) Plan. Time off: PTO, sick, holiday, & parental leave details are available Money: We provide competitive compensation packages based on the market and your overall credentials. Although this is a remote role, if you live close by, you’ll have access to our office location in McLean, VA. To promote a healthy and safe work community we require background and drug screenings as part of our hiring process. Details of our process will be provided upon request. We are an equal opportunity employer focused on celebrating diversity and inclusion. We believe that each individual should be treated equally without regard to race, color, identity, national origin, protected veteran status, religion, sex including sexual orientation and gender identity, disability, or any other characteristic protected by law.