Source description
About the role
Readiness
Conduct comprehensive reviews of incident response plans, identifying gaps and developing tailored strategies to strengthen organizational preparedness.
Design and deliver customized incident response playbooks to address specific threats and operational needs.
Facilitate training sessions on incident response fundamentals to build customer capabilities.
Lead workshops, tabletop exercises, drills, and functional simulations to evaluate and improve readiness.
Provide strategic guidance to customers on integrating readiness into broader security programs.
Contribute to the development of readiness methodologies and internal knowledge sharing.
Incident Response
Serve as a subject matter expert in digital forensics and incident response (DFIR).
Lead large-scale, complex investigations involving host, network, and cloud artifacts to determine the nature, scope, and root cause of cyber incidents.
Collaborate and coordinate with cross-functional incident response teams.
Guide containment, remediation, and recovery efforts to secure environments post-incident.
Maintain a professional, calming, and authoritative presence during high-pressure incidents.
Brief senior leadership and technical teams on findings, risks, and recommendations.
Support the development of incident response methodologies and contribute to internal capability building.
Participate in a 24x7 emergency response rotation which includes weekends.
More at Sophos