Advise leadership on applications, networks, information security, databases, operating systems, or web technologies for highly complex business and technical needs across multiple groups
Lead strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise
Translate advanced technology experience, business objectives, enterprise technology environments, organizational structures, and strategic opportunities into technical engineering solutions
Provide vision, direction, and expertise to leadership on innovative and significant business solutions
Maintain knowledge of industry practices and emerging technologies and recommend innovations that enhance operations or competitive position
Strategically engage with professionals and managers across the enterprise and serve as a technical advisor to leadership
Required Qualifications:
7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
Desired Qualifications:
7+ years of focused professional experience in DFIR, threat hunting, and digital forensics within highly regulated industries (financial services preferred) or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
Proven experience leading complex, multi‑team, enterprise‑wide programs in highly regulated organizations.
Strong knowledge of digital forensics and incident response principles, tooling, and frameworks (e.g., case management systems, SOAR, log pipelines, forensics investigations, event triage).
Familiarity with SOC and IR functions, threat intelligence, detection engineering, and crisis management.
Experience with SIEM tools like Splunk , Crowdstrike etc.
Proficiency with program and project management tools and frameworks (e.g., JIRA, Confluence, Smartsheet, MS Project, SAFe, Agile, Waterfall/Hybrid).
Demonstrated proficiency in Python, PowerShell or equivalent scripting languages with practical experience automating forensic evidence collection, processing and investigative workflows.
Exceptional communication skills, including executive‑level reporting, stakeholder engagement, and risk management.
Ability to operate effectively across highly technical and non‑technical domains, balancing operational needs with engineering constraints and business priorities.
Proven ability to analyze malware and malicious artifacts, including dynamic and static analysis, memory forensics, and identification of persistence mechanisms (formal reverse‑engineering experience is a plus).
Demonstrated expertise in cloud incident response (AWS, Azure, or GCP), including log analysis, IAM investigations, container workload forensics, and cloud-native security tooling