Senior Incident Responder

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage the complete incident handling process from the initial client request and triage to containment, recovery, and post-incident analysis.

• Investigate and resolve critical client security incidents, including compromised email systems, SIM swap incidents, financial account takeovers, and targeted credential theft.

• Examine client computers and mobile devices to determine the extent of compromise and implement remediation measures.

• Review account activities and transaction histories across email, banking, retail, and social media platforms.

• Assist clients with fraud investigations, disputes, account freezes, and communication with platforms.

• Support identity theft victims by guiding them through credit bureau freezes, fraud alerts, IdentityTheft.gov, and law enforcement reporting.

• Analyze observed activities against the personal attack kill chain to pinpoint attack stages and disruption strategies.

• Directly engage with clients, their families, assistants, family offices, and corporate security during emergency onboarding and active incidents.

• Provide composed, clear, and authoritative guidance while communicating complex threat assessments.

• Participate in on-call and escalation duty for client incidents and urgent matters.

• Act as the top technical escalation point and mentor Security and Client Success team members.

• Oversee network vulnerability assessments of client infrastructure.

• Enhance internal incident response playbooks and conduct regular post-onboarding follow-ups.

⛳️ Requirements

• 5-8+ years of experience in a dedicated Incident Response, Digital Forensics (DFIR), or advanced cybersecurity analyst position.

• Proven experience managing the complete incident lifecycle, particularly with personal/executive account takeovers, mobile threats, and endpoint malware.

• Demonstrated experience in investigating fraud related to financial transactions, including direct collaboration with banks and credit card companies.

• Extensive technical knowledge in conducting forensics and vulnerability management across Windows, macOS, iOS, Android, and Linux environments.

• Proficient understanding of identity theft remediation and attack kill chain frameworks.

• Advanced industry certifications are highly desirable, such as GCIH, GCFA, CISSP, OSCP, or similar credentials.

• Fraud and financial crime certifications such as CFE, CFCS, or CAMS are a significant advantage.

• Exceptional communication skills with the ability to convert technical terminology into practical advice for non-technical clients.

• A college degree in Information Technology (IT/CS/CE) or equivalent practical experience.

• Capability to work with a high degree of independence.

• Availability to participate in an on-call rotation that may include occasional nights and weekends.

🏝️ Benefits

• Comprehensive Medical, Dental, and Vision plans with a 100% employer-paid monthly premium option for employees and a 50% employer-paid premium for dependents.

• Health Savings Account with company contributions for eligible medical plans.

• Flexible Vacation Plan.

• 10 Paid Company Holidays.

• 100% employer-paid Life, AD&D, and Short- and Long-Term Disability Insurance.

• 401k with Traditional and Roth options, including employer match.

• Company Equity.

• Paid Parental and Pregnancy Recovery Leave.

• Company and team off-sites as well as virtual events throughout the year.

• Home office stipend.