Incident Response Engagement – Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Direct and oversee every stage of the incident response lifecycle — encompassing scoping, containment, eradication, and recovery — within moderately complex, multi-system environments.

• Act as the main point of contact for the Cowbell Claims Team, breach counsel, Incident Response providers, and policyholders during active cases.

• Supervise the activities of digital forensics and incident response providers, ensuring prompt and precise analysis of impacted systems and environments.

• Recognize and proactively manage scope creep across simultaneous engagements, ensuring adherence to project timelines and alignment with stakeholders.

• Arrange, coordinate, and facilitate the presentation of intricate forensic findings into concise, actionable reports tailored for technical, legal, and executive audiences.

• Function with a solid understanding of Attorney-Client Privilege and the Work Product Doctrine, ensuring the proper management of sensitive investigation materials in collaboration with legal counsel.

• Work collaboratively with claims adjusters, underwriters, and external partners to assist in accurate incident documentation and coverage decisions.

• Aid in the ongoing enhancement of Cowbell Resiliency Service’s incident response methodologies, playbooks, and tools.

⛳️ Requirements

• 4–6 years of practical DFIR experience, with significant exposure to the cyber insurance landscape.

• Proven experience in managing the scoping, containment, eradication, and recovery stages of cyber incidents.

• Established history of leading moderately complex, multi-system incident investigations, showcasing strong project management skills and the capacity to identify and mitigate scope creep.

• Ability to work effectively in legally sensitive environments, demonstrating an understanding of Attorney-Client Privilege and the Work Product Doctrine.

• Excellent consulting and communication abilities, with experience in presenting forensic findings to diverse audiences, including legal, technical, and executive stakeholders.

🏝️ Benefits

• Comprehensive benefits

• Competitive compensation

• Continuous opportunities for professional development