Manager, Incident Response

In this role you will lead complex DFIR investigations end to end for high-profile clients, acting as the engagement manager and technical lead. You will coordinate scope, budget, resourcing and delivery quality while serving as the primary client contact. You’ll direct forensic analysis across endpoints, networks, cloud and enterprise systems and liaise with external counsel, insurers and brokers. The role combines deep technical problem-solving with commercial judgement to help clients contain threats and move forward decisively.

• Lead investigations into ransomware, data breaches, insider threats and business email compromise from triage to final reporting
• Act as engagement manager: own scope, budget, resourcing and delivery quality; primary client contact
• Direct forensic analysis across endpoints, networks, cloud and enterprise systems; review work of the investigation team
• Lead conversations with external legal counsel, insurers and brokers, including briefings, status calls, and defensible written reporting

• 5+ years’ experience in incident response, digital forensics or cyber investigations with ownership of end-to-end engagements
• Deep technical strength in incident response, forensics, malware analysis or network security; ability to direct and QA others’ work
• Proven experience leading discussions with legal counsel, insurers and executive stakeholders in high-pressure privileged environments
• Consulting or professional services background with strong commercial judgement; relevant certifications advantageous
• experienced investigator and engagement leader with calm under pressure and commercial acumen

• calm under pressure
• commercial acumen
• stakeholder management
• incident response
• digital forensics
• malware analysis