Principal Engagement Lead (Remote)

View full description

Requirements:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, related degree, or relevant professional work experience in these disciplines.
• Former professional experience in leading and managing active cybersecurity engagements, including incident response, digital forensics investigations, and interaction with clients, legal counsel, and cyber insurers.
• Experience in conducting security investigations in Linux and Windows environments.
• Understanding of cloud platforms and security considerations within AWS, Azure, and GCP.
• Knowledge of digital forensic artifacts and tools such as ELK, Axiom, Encase, FTK, Volatility, or Open-Source tools.
• Proficiency in conducting forensic analysis, threat assessments, and post-incident reviews.
• Eagerness to learn from team, grow your knowledge, and teach your colleagues.
• Ability to provide after-hours (on-call/weekend rotational) support as required to address critical incidents and maintain continuous coverage.

Responsibilities:

• Lead and oversee active client-facing incident response engagements, working closely with other team members to guide clients through the entire incident response lifecycle from detection to recovery.
• Conduct scoping calls with clients to define the incident scope, objectives, and expectations of each engagement.
• Work closely with other Engagement Leads and Forensic Consultants to ensure effective coordination of resources and expertise on client matters.
• Build and cultivate strong client relationships based on trust, open communication, and collaborative problem-solving.
• Provide well-informed solutions that go beyond immediate client challenges to achieve long-term security goals.
• Communicate advanced cybersecurity concepts both internally and externally and produce clear and concise verbal and written reports detailing incident findings and analysis.
• Actively knowledge share with team members cultivating a culture of continuous learning, and stay up to date on industry trends, emerging threats, and best practices.
• Provide after-hours (on-call/weekend rotational) support as required to address critical incidents and maintain continuous coverage.