Engagement Lead, Incident Response

ROLES & RESPONSIBILITIES  

• Responds to Client, Counsel, Carrier (CCC) in accordance with Key Performance Indicators (KPIs) and urgency of requests
• Is solely responsible for the success, failure, and management of all team members’ activities and communications during the engagement
• Engagement Management (External):
  • Leads the technical conversation and drive the direction and strategy of the engagement
  • Educates the Client on how to make an informed decision
  • Guides the Client on the importance of conducting a cost vs. benefit analysis
  • Maintains accountability for accurate and timely password changes within 24 hours
  • Builds the strategy for success and deliver it
  • Assists client with developing and executing their recovery plans
  • Establishes priorities for their IT and Arete engagement personnel
  • Is the subject matter expert on various technologies, infrastructure, and engagement-specific items
  • Tracks progress to completion
• Engagement Management (Internal):
  • Communicates clearly and manages priorities by role ensuring each team member understands their tasks, values, and time to deliver
  • Ensures project workstreams are being delivered on-time
  • Monitors budget and team hours against allocated hours within the statement of work (SOW)
    • Ensures daily time entry is complete within Project management tool for the team
    • Ensures project workstreams are being delivered on-time
    • Ensures project budget is correct. Identifies potential overages and requests amendments when workstream budgets reach 75%, if necessary
    • Ensures the engagement team is utilized to a blended 70%
    • Easily identifies opportunities for add-on services to continue assisting Clients with Arete resources
  • Ensures teams execute tasks successfully and validates work product quality
  • Provides routine updates to CCC regarding overall engagement and action items
    • Delivers to the Client on-time based on agreed upon service level agreement (SLA) and/or as needed
• Coaches and mentors junior team members
• Proposes tactics and strategies that impact overall processes
• May perform other duties as assigned by management

SKILLS AND KNOWLEDGE  

• Excellent time management and organizational skills
• Widely recognized technical abilities
• Ability to teach others
• Proficiency with reading the room and adjusting conversational style accordingly.
• Ability to navigate difficult conversations effortlessly
• Expert at managing client expectations
• Ability to independently train, mentor, coach and lead team members globally and take ownership over their wins and losses
• Ability to lead projects with security implementations
• Thorough background or knowledge of network enterprise systems administration
• Thorough knowledge and understanding of operating systems and hardware architectures: Linux/Unix, Mainframe, Windows, Cloud, etc.
• Thorough knowledge and experience with core set of standard Industry technology and platforms and familiarity with cybersecurity tools. Hands-on not required but a plus
  • Endpoint Detection and Response (EDR) solutions
  • E-mail platforms: Microsoft Office (M365), On-premises Exchange, Google Workspace
  • Anti-virus (AV) vendors
  • Identity Access Management (IAM)/Zero Trust systems
  • Disaster Recover Plans
  • Firewall and Virtual Private Network (VPN) platforms
  • Remote access tools
• Knowledge of Enterprise architecture
  • Network segmentation
  • Cloud Provider Platforms:
    • Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP)
  • On-premises technologies, Physical and Virtual
  • Servers, Firewalls, routers, storage, Security Information Event Management (SIEM), Multi-factor authentication
  • DMZ configurations
• Thorough knowledge of containment, preservation, and acquisition of data within compromised IT environments
• Thorough knowledge of email servers: on-premises, cloud hosted, and third-party hosted
  • Demonstrates deep understanding of configurations
  • Understands how email servers connect to or authenticate with Active Directory (AD)
  • Understands how to collect relevant logs from popular email services (Exchange, Exchange Online, Google Workspace, and M365)
    • Familiarity with or knowledge of how to familiarize oneself with additional platforms as required
  • Comfortable directing IT personnel to perform collection of required log information
  • Knowledgeable with securing email platforms and directing IT administrators on proper configuration techniquesAbility to establish priorities, work inde