Incident Response Engagement-Lead

Accountabilities: The Incident Response Engagement-Lead will oversee cyber incident engagements from initial assessment through recovery, ensuring effective coordination between technical teams, legal partners, and affected organizations. This role requires strong ownership, structured project management, and the ability to communicate complex cybersecurity information clearly across diverse audiences.

Lead and manage incident response activities, including scoping, containment, eradication, and recovery across complex multi-system environments.

Serve as the primary liaison between claims teams, legal counsel, incident response providers, and policyholders throughout active engagements.

Oversee digital forensics and incident response partners to ensure accurate investigations, timely delivery, and quality outcomes.

Manage engagement scope, timelines, priorities, and stakeholder expectations across multiple concurrent incidents.

Coordinate and facilitate briefings of forensic findings, adapting technical information for legal, executive, and operational audiences.

Ensure proper handling of sensitive investigation materials while operating within legal frameworks such as Attorney-Client Privilege and Work Product Doctrine.

Collaborate with claims, underwriting, and external partners to support incident documentation and informed coverage decisions.

Contribute to improving incident response processes, methodologies, playbooks, and operational tools.

Requirements:

The ideal candidate is a cybersecurity professional with hands-on digital forensics and incident response experience, strong consulting capabilities, and the ability to operate effectively in legally sensitive and fast-moving environments. You should be comfortable managing complex investigations while communicating confidently with both technical and executive stakeholders.

4–6 years of hands-on experience in Digital Forensics and Incident Response (DFIR), with exposure to cyber insurance, breach response, or similar environments.

Demonstrated experience managing cybersecurity incidents through investigation, containment, remediation, and recovery phases.

Experience leading moderately complex investigations involving multiple systems and stakeholders.

Strong project management skills, including the ability to identify risks, control scope changes, and maintain engagement timelines.

Understanding of legal considerations related to incident response, including Attorney-Client Privilege and Work Product Doctrine.

Excellent written and verbal communication skills with experience presenting technical findings to legal, business, and executive audiences.

Bachelor’s degree in Cybersecurity, Information Security, Digital Forensics, Computer Science, or a related field preferred.

Relevant certifications such as GIAC Certified Incident Handler (GCIH), GIAC Network Forensic Analyst (GNFA), CompTIA Cybersecurity Analyst (CySA+), Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP) are valued.

Ability to work effectively with U.S.-based clients, legal teams, regulators, and security partners.

Strong analytical mindset, attention to detail, adaptability, and ability to remain effective under pressure.

Benefits:

Competitive compensation package aligned with experience and qualifications.

Comprehensive benefits designed to support employee health, financial security, and overall well-being.

Opportunities for professional growth and continuous learning within the cybersecurity industry.

Collaborative and dynamic work environment focused on innovation and meaningful impact.

Opportunity to work on critical cybersecurity challenges and help organizations strengthen their resilience.

Inclusive workplace culture that values transparency, teamwork, empowerment, and diverse perspectives.

Supportive environment where employees can contribute ideas and develop new skills.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1