Incident Response Engagement-Lead

Accountabilities

• Oversight of cyber incident engagements from initial assessment through recovery, ensuring effective coordination between technical teams, legal partners, and affected organizations.
• Strong ownership, structured project management, and clear communication of complex cybersecurity information across diverse audiences.
• Lead and manage incident response activities, including scoping, containment, eradication, and recovery across complex multi-system environments.
• Serve as the primary liaison between claims teams, legal counsel, incident response providers, and policyholders throughout active engagements.
• Oversee digital forensics and incident response partners to ensure accurate investigations, timely delivery, and quality outcomes.
• Manage engagement scope, timelines, priorities, and stakeholder expectations across multiple concurrent incidents.
• Collaborate with claims, underwriting, and external partners to support incident documentation and informed coverage decisions.
• Contribute to improving incident response processes, methodologies, playbooks, and operational tools.

Requirements

• Hands-on digital forensics and incident response experience, strong consulting capabilities, and ability to operate effectively in legally sensitive and fast-moving environments.
• Exposure to cyber insurance, breach response, or similar environments.
• Experience managing cybersecurity incidents through investigation, containment, remediation, and recovery phases.
• Leadership of moderately complex investigations involving multiple systems and stakeholders.
• Project management skills, including risk identification, scope change control, and engagement timeline maintenance.
• Understanding of legal considerations related to incident response, including Attorney-Client Privilege and Work Product Doctrine.
• Excellent written and verbal communication skills with experience presenting technical findings to legal, business, and executive audiences.
• Bachelor’s degree in Cybersecurity, Information Security, Digital Forensics, Computer Science, or a related field preferred.
• Relevant certifications such as GIAC Certified Incident Handler (GCIH), GIAC Network Forensic Analyst (GNFA), CompTIA Cybersecurity Analyst (CySA+), Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP) are valued.
• Ability to work effectively with U.S.-based clients, legal teams, regulators, and security partners.
• Strong analytical mindset, attention to detail, adaptability, and ability to remain effective under pressure.

Benefits

• Competitive compensation package aligned with experience and qualifications.
• Comprehensive benefits designed to support employee health, financial security, and overall well-being.
• Opportunities for professional growth and continuous learning within the cybersecurity industry.
• Collaborative and dynamic work environment focused on innovation and meaningful impact.
• Opportunity to work on critical cybersecurity challenges and help organizations strengthen their resilience.
• Inclusive workplace culture that values transparency, teamwork, empowerment, and diverse perspectives.
• Supportive environment where employees can contribute ideas and develop new skills.