Technical Lead, Incident Response
Core
Senior technical lead for incident response engagements, leading investigations from triage to closure across ransomware, BEC, cloud, and CI/CD incidents.
Role type
Senior IC incident response consultant (technical lead)
Builds
Client incident response outcomes and recovery plans
Domain
Cyber security consulting, cloud security, DevSecOps
Deliverable
client delivery
Required skills
incident response leadership, forensic analysis, malware analysis, root cause analysis, cloud security (AWS/Azure/GCP), CI/CD pipeline security, scripting/automation, threat actor knowledge, high-pressure client communication
Preferred skills
consulting experience, GCFE/GCFA/EnCE/CISSP/GREM/OSCP certifications, cloud platform certifications (Kubernetes/Terraform)
Technologies
AWS, Azure, GCP, CI/CD platforms, Infrastructure-as-Code, logging and audit tools
Responsibilities
Lead technical incident response engagements from first contact to closure; Act as primary technical resource providing guidance to the project team; Oversee host, network, and cloud-based investigations including triage, containment, and system recovery; Conduct forensic analysis, log/malware analysis, and root cause analysis; Investigate incidents involving ransomware, BEC, unauthorized access, and cloud/CI/CD supply chain attacks; Participate in 24x7x365 on-call rotation
Seniority
Senior, hands-on IC with client-facing delivery
