Field Security Advisor

We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We need to parse the job posting. First, remove boilerplate: The initial paragraph about Veeam is about company, not role. Should we include? The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." The initial paragraph is about company, not role. It's substantive? It might be considered part of the posting but not about role. The instruction says we reformat a job posting into clean HTML. Likely we should include company overview? The sections are limited to headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. The initial company description could go under "About the role"? Actually "About The Role" heading appears in posting. So we should put that content under

About the role

. The initial paragraph about Veeam could be considered part of "About the role"? Might be separate but we can include it there as it's substantive. We need to extract: About the role: The paragraph after "About The Role" heading: "We have created a new standard in cyber extortion incident response and are expanding our Cyber Readiness & Advisory Services team to continue evolving the retained client experience. We are looking for a Field Security Advisor to help us develop and deliver valuable content, tabletop exercises, and training workshops to our enterprise customers. In this role, you will work closely with our Customer Success team and Field CISO organization to help Global 2000 customers prepare executive, technical, finance, legal, and operational teams for the realities of handling a cyber extortion incident and improving organizational resiliency. Coveware is a fully distributed company with employees across multiple geographies. This is a remote role with global time zone flexibility. Candidates may be based in any geography as long as they can provide reliable overlap with customer time zones and travel periodically for customer on-sites and events. This is an individual contributor role. The role reports to the Senior Director, Field CISO within the Cyber Readiness and Advisory Services team." That's the about role. Responsibilities: Under "What You'll Do": list bullet points. - Deliver cyber extortion readiness engagements for retained enterprise customers, including executive briefings, technical workshops, and cross-functional training sessions. - Design and facilitate tabletop exercises that reflect realistic cyber extortion conditions, operational disruption, ambiguous early facts, and executive decision points. - Curate and continuously improve customer-facing content, including playbooks, decision frameworks, readiness checklists, and workshop materials, keeping deliverables aligned to current ransomware/extortion patterns. - Conduct research and forensic data analysis to support advisory deliverables and customer insights, including synthesizing lessons learned from case trends and interpreting forensic outputs/artifacts (as available) into clear, actionable readiness recommendations. - Support the customer lifecycle as needed, including customer due diligence requests, RFP/RFI questionnaires, and review of contracts/security exhibits in partnership with internal stakeholders. - Collaborate internally with case management, SMEs, and other stakeholders to ensure readiness guidance stays grounded in real-world incident behavior and recovery constraints. That's responsibilities. Requirements: Might be under "What You'll Bring". That includes experience etc. Could be considered Requirements. Also "Qualifications" maybe separate? The posting has "What You'll Bring" which includes required experience and skills. Could split into Requirements (experience) and Qualifications (education/certifications) and Skills (technologies). But we need to follow headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide what goes where. "Technologies You'll Work With" list: Incident Response / DFIR tools and methodologies, Security Operations platforms and processes, Cybersecurity advisory and consulting frameworks, MITRE ATT&CK, NIST Cybersecurity Framework (CSF), CIS Controls, Forensic analysis tools and artifacts, Ransomware and cyber extortion readiness frameworks. That's skills/technologies. "What You'll Bring" includes: - 7+ years of experience in information security/cybersecurity, with depth in one or more of: Incident response / DFIR, Security operations, Cyber risk / security advisory / consulting - 3+ years of customer-facing experience supporting B2B enterprise customers in advisory, incident readiness, cybersecurity, technology, or forensics-related services. - Foundational knowledge of application, identity, cloud and network security concepts, and incident response best practices, ideally in a Global 2000 enterprise environment. - Demonstrated experience presenting in a consultative manner to enterprise leadership and facilitating educational workshops and tabletop exercises. - Ability to communicate complex topics clearly and authoritatively to diverse audiences, orally and in writing. - Willingness and ability to travel for customer meetings, workshops, and events on occasion. - Comfortable leading discussions with enterprise stakeholders across both technical and executive teams. - Consultative/advisory mindset with structured problem framing, strong facilitation skills, crisp communication, and defensible recommendations. - Strong listening skills with excellent written and verbal communication skills and willingness to deliver hard truths when needed to surface gaps and drive improvement. - Strong, structured writing skills with experience producing executive-ready, evidence-based deliverables, translating complex inputs into clear narratives, prioritized recommendations, and defensible documentation. That's requirements/qualifications/skills. "Bonus Skills": One or more information security certifications (e.g., CISSP, CISM, CISA, CCSP, GCIH, GCFE, GCFA). Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field. Experience translating forensic findings and incident learnings into executive-ready narratives and prioritized readiness actions. Familiarity with frameworks/standards such as MITRE ATT&CK, NIST CSF and CIS Controls and how to apply them pragmatically to cyber defense and recovery. Experience collaborating with teammates to stay current on the threat landscape and continuously improve customer-facing materials. These could be qualifications (education, certifications) and skills. We need to avoid filler like "commensurate with experience". Not present. Benefits: Under "What You'll Get": list bullet points. - Unlimited paid time off, 12 paid holidays including 4 global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares - Paid parental leave: 8 weeks for all parents, 16 weeks for birthing parents - Medical, dental, and vision coverage starting on your first day - Mental health support, therapy sessions, and digital wellness tools via our Employee Assistance Program - 401(k) retirement plan with company matching contributions - Fertility, adoption, and surrogacy support through Maven, plus paid volunteer time - AirVet: 24/7 virtual veterinary care at no cost - Legal services, identity protection, and supplemental health insurance options - Tax-advantaged spending accounts for healthcare, dependent care, and commuting - Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops, and learning events like our annual Global Day of Learning Pay: Under "Compensation Transparency": includes compensation ranges per zone. That's specific. So we need a Pay section with that info. Schedule: Not mentioned explicitly. There's mention of remote role with global time zone flexibility, travel periodically. No explicit schedule like full-time, hours. So we should not create Schedule section because no specific content. Thus sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay. We need to decide what goes into Requirements vs Qualifications vs Skills. We can define: - Requirements: Experience requirements (7+ years, 3+ years customer-facing, willingness to travel, etc.) - Qualifications: Education, certifications, bonus skills (degree, certifications) - Skills: Technical skills, frameworks, tools (Technologies You'll Work With, plus communication, presentation, etc.) But we need to avoid duplication. Let's parse. From "What You'll Bring": includes experience, knowledge, abilities, soft skills. Could be Requirements. From "Bonus Skills": includes certifications, degree, experience translating findings, familiarity with frameworks, experience collaborating. Those could be Qualifications. From "Technologies You'll Work With": list of frameworks/tools. That's Skills. Thus: Requirements (

• ) from "What You'll Bring" core requirements (excluding bonus). Let's list: - 7+ years of experience in information security/cybersecurity, with depth in one or more of: Incident response / DFIR, Security operations, Cyber risk / security advisory / consulting - 3+ years of customer-facing experience supporting B2B enterprise customers in advisory, incident readiness, cybersecurity, technology, or forensics-related services. - Foundational knowledge of application, identity, cloud and network security concepts, and incident response best practices, ideally in a Global 2000 enterprise environment. - Demonstrated experience presenting in a consultative manner to enterprise leadership and facilitating educational workshops and tabletop exercises. - Ability to communicate complex topics clearly and authoritatively to diverse audiences, orally and in writing. - Willingness and ability to travel for customer meetings, workshops, and events on occasion. - Comfortable leading discussions with enterprise stakeholders across both technical and executive teams. - Consultative/advisory mindset with structured problem framing, strong facilitation skills, crisp communication, and defensible recommendations. - Strong listening skills with excellent written and verbal communication skills and willingness to deliver hard truths when needed to surface gaps and drive improvement. - Strong, structured writing skills with experience producing executive-ready, evidence-based deliverables, translating complex inputs into clear narratives, prioritized recommendations, and defensible documentation. That's many items; we can keep as list. Qualifications: Bonus Skills items: - One or more information security certifications (e.g., CISSP, CISM, CISA, CCSP, GCIH, GCFE, GCFA). - Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field. - Experience translating forensic findings and incident learnings into executive-ready narratives and prioritized readiness actions. - Familiarity with frameworks/standards such as MITRE ATT&CK, NIST CSF and CIS Controls and how to apply them pragmatically to cyber defense and recovery. - Experience collaborating with teammates to stay current on the threat landscape and continuously improve customer-facing materials. Skills: Technologies You'll Work With list: - Incident Response / Digital Forensics and Incident Response (DFIR) tools and methodologies - Security Operations platforms and processes - Cybersecurity advisory and consulting frameworks - MITRE ATT&CK - NIST Cybersecurity Framework (CSF) - CIS Controls - Forensic analysis tools and artifacts - Ransomware and cyber extortion readiness frameworks Also maybe include communication/presentation skills but those are in Requirements. Now Benefits list as above. Pay: Provide compensation ranges per zone. Should we present as a table? Use
  • maybe each zone as a list item. Keep as prose? Could be list. We'll output:

    About the role

    ... (the paragraph)

    Responsibilities

    • ... each

    Requirements

    • ... each

    Qualifications

    • ... each

    Skills

    • ... each

    Benefits

    • ... each

    Pay

    • ... each zone
    No Schedule. Make sure to preserve all substantive information. Ensure we don't lose any detail. Let's craft the About the role paragraph exactly as in posting (maybe combine sentences). We'll copy: "We have created a new standard in cyber extortion incident response and are expanding our Cyber Readiness & Advisory Services team to continue evolving the retained client experience. We are looking for a Field Security Advisor to help us develop and deliver valuable content, table