ROLES & RESPONSIBILITIES
- Responds to Client, Counsel, Carrier (CCC) in accordance with Key Performance Indicators (KPIs) and urgency of requests
- Is solely responsible for the success, failure, and management of all team members' activities and communications during the engagement
- Engagement Management (External): Leads the technical conversation and drive the direction and strategy of the engagement
- Educates the Client on how to make an informed decision
- Guides the Client on the importance of conducting a cost vs. benefit analysis
- Maintains accountability for accurate and timely password changes within 24 hours
- Builds the strategy for success and deliver it
- Assists client with developing and executing their recovery plans
- Establishes priorities for their IT and Arete engagement personnel
- Is the subject matter expert on various technologies, infrastructure, and engagement-specific items
- Tracks progress to completion
- Engagement Management (Internal): Communicates clearly and manages priorities by role ensuring each team member understands their tasks, values, and time to deliver
- Ensures project workstreams are being delivered on-time
- Monitors budget and team hours against allocated hours within the statement of work (SOW)
- Ensures daily time entry is complete within Project management tool for the team
- Ensures project workstreams are being delivered on-time
- Ensures project budget is correct. Identifies potential overages and requests amendments when workstream budgets reach 75%, if necessary
- Ensures the engagement team is utilized to a blended 70%
- Easily identifies opportunities for add-on services to continue assisting Clients with Arete resources
- Ensures teams execute tasks successfully and validates work product quality
- Provides routine updates to CCC regarding overall engagement and action items
- Delivers to the Client on-time based on agreed upon service level agreement (SLA) and/or as needed
- Coaches and mentors junior team members
- Proposes tactics and strategies that impact overall processes
- May perform other duties as assigned by management
SKILLS AND KNOWLEDGE
- Excellent time management and organizational skills
- Widely recognized technical abilities
- Ability to teach others
- Proficiency with reading the room and adjusting conversational style accordingly.
- Ability to navigate difficult conversations effortlessly
- Expert at managing client expectations
- Ability to independently train, mentor, coach and lead team members globally and take ownership over their wins and losses
- Ability to lead projects with security implementations
- Thorough background or knowledge of network enterprise systems administration
- Thorough knowledge and understanding of operating systems and hardware architectures: Linux/Unix, Mainframe, Windows, Cloud, etc.
- Thorough knowledge and experience with core set of standard Industry technology and platforms and familiarity with cybersecurity tools. Hands-on not required but a plus Endpoint Detection and Response (EDR) solutions
- E-mail platforms: Microsoft Office (M365), On-premises Exchange, Google Workspace
- Anti-virus (AV) vendors
- Identity Access Management (IAM)/Zero Trust systems
- Disaster Recover Plans
- Firewall and Virtual Private Network (VPN) platforms
- Remote access tools
- Knowledge of Enterprise architecture Network segmentation
- Cloud Provider Platforms: Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP)
- On-premises technologies, Physical and Virtual
- Servers, Firewalls, routers, storage, Security Information Event Management (SIEM), Multi-factor authentication
- DMZ configurations
- Thorough knowledge of containment, preservation, and acquisition of data within compromised IT environments
- Thorough knowledge of email servers: on-premises, cloud hosted, and third-party hosted Demonstrates deep understanding of configurations
- Understands how email servers connect to or authenticate with Active Directory (AD)
- Understands how to collect relevant logs from popular email services (Exchange, Exchange Online, Google Workspace, and M365)
- Familiarity with or knowledge of how to familiarize oneself with additional platforms as required
- Comfortable directing IT personnel to perform collection of required log information
- Knowledgeable with securing email platforms and directing IT administrators on proper configuration techniquesAbility to establish priorities, work independently and proceed with objectives with minimal supervision
JOB REQUIREMENTS
- Minimum of 7 years conducting digital investigations or leading full-cycle incident response investigations for a major consulting firm or global IR company
- Bachelor's degree in a computer science related discipline and 8+ years related experience or Master's Degree and 6+ years related experience or J.D. and 4+ years related experience
- Minimum of 1 industry certifications: GCFA, GCFE, GCIH, GISP, CISSP, Security+, MCSC, Network+, or equivalent
DISCLAIMER
The above statements are intended to describe the general nature and level of
