Senior Incident Response Consultant

About the role

This role joins SpearTip, the cybersecurity consulting segment within Zurich Resilience Solutions. Blending cutting-edge technologies, unique skill sets, and proven cyber counterintelligence strategies, SpearTip partners with our clients to protect shareholder value, shield corporate reputations, and enhance long-term profits. We are driven to protect our clients from the ever-changing threat actors and become the gold standard in detecting zero-day vulnerabilities.

Responsibilities

• Lead incident response engagements for external clients, conducting digital forensics investigations, malware analysis, and threat actor attribution to identify scope, impact, and root cause of security incidents.
• Provide 24/7 on-call emergency response services, rapidly deploying to client sites or remotely connecting to contain active threats, preserve evidence, and minimize business disruption.
• Conduct comprehensive forensic examinations of compromised systems, networks, and cloud environments using industry-standard tools and methodologies to support client remediation and potential legal proceedings.
• Deliver executive-level briefings and written reports to clients, translating complex technical findings into business impact assessments and actionable recommendations.
• Cook with client stakeholders including IT teams, legal counsel, insurance carriers, law enforcement, and executive leadership to manage incident response activities and communication strategies.
• Provide expert guidance on ransomware negotiations, business email compromise investigations, insider threat cases, and advanced persistent threat incidents.
• Develop and deliver incident response retainer services, conducting proactive readiness assessments, tabletop exercises, and security program evaluations for client organizations.
• Mentor junior consultants and analysts, providing technical guidance and quality assurance on client deliverables.
• Maintain detailed case documentation, time tracking, and engagement status reporting to ensure accurate billing and project management.
• Partner with insurance brokers, managed service providers, and law firms to provide incident response services as part of cyber insurance claims and breach response protocols.
• Stay current on emerging threats, attack techniques, and forensic methodologies through continuous research and professional development.
• Contribute to thought leadership initiatives including blog posts, conference presentations, and client education materials.

Qualifications

• Bachelor’s degree and 5 or more years of experience in the Information Technology area OR
• Zurich Cybersecurity Technician Apprentice, including Cyber Security Certification and 6 or more years of experience in the Information Technology area OR
• High School Diploma or Equivalent and 7 or more years of experience in the Information Technology area AND MS Office experience AND Knowledge of Cyber Security Operations
• Digital Forensics & Incident Response - Proficiency Level Advanced
• Threat Intelligence & Malware Analysis - Proficiency Level Intermediate
• Client Communication & Stakeholder Management - Proficiency Level Advanced
• Windows/Linux System Forensics - Proficiency Level Advanced
• Network Forensics & Log Analysis - Proficiency Level Intermediate
• Cloud Security (Azure/AWS/M365) - Proficiency Level Intermediate
• Forensic Tool Proficiency (EnCase, FTK, X-Ways, Volatility, etc.) - Proficiency Level Advanced
• Ransomware & BEC Investigations - Proficiency Level Advanced
• Report Writing & Executive Communication - Proficiency Level Advanced
• Project Management - Proficiency Level Intermediate