Engagement Lead, Canada

Arete IR; Canada; On-site; CAD 120,000 - 180,000; Full time

Job summary

Arete IR is seeking an experienced Engagement Manager to lead digital investigations and full-cycle incident responses for client engagements in Canada. You will drive technical conversations, set strategy, and coordinate internal and external teams to deliver outcomes that meet SLA commitments.

You will educate clients on decision-making, manage budgets, monitor time and resources, and mentor junior staff while identifying opportunities for additional services.

Qualifications

• Minimum 7 years conducting digital investigations or leading full-cycle incident response investigations for a major consulting firm or global IR company.
• Bachelor's degree in a computer science related discipline and 8+ years related experience or Master's Degree and 6+ years related experience or J.D. and 4+ years related experience
• Minimum of 1 industry certifications: GCFA, GCFE, GISP, CISSP, Security+, MCSC, Network+, or equivalent
• Fluent in Canadian French

Responsibilities

• Responds to Client, Counsel, Carrier (CCC) in accordance with KPIs and urgency of requests.
• Leads the technical conversation and drive the direction and strategy of the engagement
• Educates the Client on how to make an informed decision
• Guides the Client on the importance of conducting a cost vs. benefit analysis
• Maintains accountability for accurate and timely password changes within 24 hours
• Builds the strategy for success and deliver it
• Assists client with developing and executing their recovery plans
• Establishes priorities for their IT and Arete engagement personnel
• Is the subject matter expert on various technologies, infrastructure, and engagement-specific items
• Tracks progress to completion
• Communicates clearly and manages priorities by role ensuring each team member understands their tasks, values, and time to deliver
• Monitors budget and team hours against allocated hours within the SOW
• Ensures the engagement team is utilized to a blended 70%
• Provides routine updates to CCC regarding overall engagement and action items
• Coaches and mentors junior team members
• Proposes tactics and strategies that impact overall processes
• May perform other duties as assigned by management

Skills

Digital investigations

Incident management

Client management

Cybersecurity tools

Cloud platforms

Education

Bachelor's degree in CS or related

Master's degree in CS or related

J.D. (related to IT)

Tools

SIEM

EDR

Firewalls

Active Directory

Job description

ROLES & RESPONSIBILITIES

• Responds to Client, Counsel, Carrier (CCC) in accordance with Key Performance Indicators (KPIs) and urgency of requests
• Is solely responsible for the success, failure, and management of all team members' activities and communications during the engagement
• Engagement Management (External): Leads the technical conversation and drive the direction and strategy of the engagement
• Educates the Client on how to make an informed decision
• Guides the Client on the importance of conducting a cost vs. benefit analysis
• Maintains accountability for accurate and timely password changes within 24 hours
• Builds the strategy for success and deliver it
• Assists client with developing and executing their recovery plans
• Establishes priorities for their IT and Arete engagement personnel
• Is the subject matter expert on various technologies, infrastructure, and engagement-specific items
• Tracks progress to completion
• Engagement Management (Internal): Communicates clearly and manages priorities by role ensuring each team member understands their tasks, values, and time to deliver
• Ensures project workstreams are being delivered on-time
• Monitors budget and team hours against allocated hours within the statement of work (SOW) Ensures daily time entry is complete within Project management tool for the team
• Ensures project workstreams are being delivered on-time
• Ensures project budget is correct. Identifies potential overages and requests amendments when workstream budgets reach 75%, if necessary
• Ensures the engagement team is utilized to a blended 70%
• Easily identifies opportunities for add-on services to continue assisting Clients with Arete resources
• Ensures teams execute tasks successfully and validates work product quality
• Provides routine updates to CCC regarding overall engagement and action items Delivers to the Client on-time based on agreed upon service level agreement (SLA) and/or as needed
• Coaches and mentors junior team members
• Proposes tactics and strategies that impact overall processes
• May perform other duties as assigned by management

SKILLS AND KNOWLEDGE

• Excellent time management and organizational skills
• Widely recognized technical abilities
• Ability to teach others
• Proficiency with reading the room and adjusting conversational style accordingly.
• Ability to navigate difficult conversations effortlessly
• Expert at managing client expectations
• Ability to independently train, mentor, coach and lead team members global
• Ability to lead projects with security implementations
• Thorough background or knowledge of network enterprise systems administration
• Thorough knowledge and understanding of operating systems and hardware architectures: Linux/Unix, Mainframe, Windows, Cloud, etc.
• Thorough knowledge and experience with core set of standard Industry technology and platforms and familiarity with cybersecurity tools. Hands-on not required but a plus Endpoint Detection and Response (EDR) solutions
• E-mail platforms: Microsoft Office (M365), On-premises Exchange, Google Workspace
• Anti-virus (AV) vendors
• Identity Access Management (IAM)/Zero Trust systems
• Disaster Recover Plans
• Firewall and Virtual Private Network (VPN) platforms
• Remote access tools
• Knowledge of Enterprise architecture Network segmentation
• Cloud Provider Platforms: Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP)
• On-premises technologies, Physical and Virtual
• Servers, Firewalls, routers, storage, Security Information Event Management (SIEM), Multi-factor authentication
• DMZ configurations
• Thorough knowledge of containment, preservation, and acquisition of data within compromised IT environments
• Thorough knowledge of email servers: on-premises, cloud hosted, and third-party hosted Demonstrates deep understanding of configurations
• Understands how email servers connect to or authenticate with Active Directory (AD)
• Understands how to collect relevant logs from popular email services (Exchange, Exchange Online, Google Workspace, and M365) Familiarity with or knowledge of how to familiarize oneself with additional platforms as required
• Comfortable directing IT personnel to perform collection of required log information
• Knowledgeable with securing email platforms and directing IT administrators on proper configuration techniquesAbility to establish priorities, work independently and proceed with objectives with minimal supervision

JOB REQUIREMENTS

• Minimum of 7 years conducting digital investigations or leading full-cycle incident response investigations for a major consulting firm or global IR company
• Bachelor's degree in a computer science related discipline and 8+ years related experience or Master's Degree and 6+ years related experience or J.D. and 4+ years related experience
• Minimum of 1 industry certifications: GCFA, GCFE, GISP, CISSP, Security+, MCSC, Network+, or equivalent
• Fluent in Canadian French

DISCLAIMER

The above statements are intended to describe the g