Lead and manage incident response engagements, ensuring seamless customer outcomes through effective delegation and oversight.
Apply rigorous investigative workflows, analyzing artifacts and maintaining documentation to support incident investigations.
Support the delivery of proactive security services, leveraging data-driven insights to enhance client security posture.
Collaborate on developing new proactive service initiatives and improve existing service delivery models.
Communicate technical findings clearly to both technical teams and executive stakeholders during high-pressure situations.
What's Needed?
Proven experience in managing customer expectations and maintaining accountability during incident response lifecycle.
Strong soft skills with the ability to communicate effectively in crisis environments.
Hands-on experience with SIEM tools like Splunk and EDR solutions such as CrowdStrike.
Experience with incident types including Business Email Compromise, Active Directory compromise, and vulnerability exploits.
Background in IT security, with at least 4+ years in the field and 2+ years in a consulting or customer-facing role.
Technical Skills (Secondary but Desired) Core Tools: Experience with SIEM (Splunk) and EDR (CrowdStrike). Exposure to SentinelOne, Microsoft, or Rapid7 is a plus