Cyber Incident Response Associate

Chaintrax Cyber; Chicago (IL); Hybrid; USD 60,000 - 80,000; Full time

Job summary

Chaintrax Cyber is seeking a detail-oriented Cyber Incident Response Associate to join our team focused on threat actor negotiation support. You will be on the front lines of active cyber extortion cases—coordinating new incident intake, managing case documentation, and assisting Engagement Leads as they communicate with threat actors.

This junior-level position offers hands‑on mentorship and real‑world experience in cybersecurity consulting, crisis response, and threat intelligence, with a

Qualifications

• 1–2 years of professional experience in consulting, client services, project coordination, law, insurance, or a related field.
• No direct cybersecurity experience is required, but interest in incident response, threat intelligence, or crisis communications is desirable.
• Must be authorized to work in the U.S. by the start of employment.
• Must be able to work remotely with reliable internet access.
• Organizational Skills & Attention to Detail: Proven ability to maintain meticulous records and manage multiple tasks simultaneously.
• Prioritization & Multitasking: Skilled at navigating competing priorities and deadlines with ease.
• Collaboration & Teamwork: Enthusiastic about learning from and supporting senior negotiators; open to feedback and mentorship.
• Flexibility & Resilience: Willingness to occasionally work outside typical business hours due to the unpredictable nature of cyber incidents.

Responsibilities

• Gather key information from clients, legal teams, and insurance providers to scope new ransomware or cyber extortion incidents.
• Document and help identify key factors that may influence negotiation and response strategies.
• Maintain accurate, real-time documentation of ongoing case activities and threat actor communications.
• Organize, update, and track case files, ensuring audit-ready and accessible to the Incident Response team, adhering to best practices for data security and confidentiality.
• Help manage internal workflows to ensure all team members have the information they need at each stage of the incident.
• Assist with client-facing updates, conveying crucial information in a clear, professional manner.
• Support senior team members to ensure consistent messaging and empathy during high-pressure situations.
• Collaborate closely with senior negotiators to support active threat actor communications.
• Assist in gathering and synthesizing intelligence that informs negotiation strategies and client advisory.
• Perform general administrative tasks to support the Incident Response team’s operations, including scheduling, note-taking, and ad hoc requests.
• Take on additional responsibilities as needed to ensure smooth execution of case strategies and deliverables.

Skills

Attention to detail

Organization

Communication

Job description

Bring your expertise to a team focused on solving complex challenges across blockchain investigations, cybersecurity, and financial crime.

Chicago Remote or Hybrid

Job Summary & Objectives

Chaintrax Cyber is seeking a detail-oriented and proactive Cyber Incident Response Associate to join our team specializing in threat actor negotiation support. In this role, you will be on the front lines of active cyber extortion cases—coordinating new incident intake, managing case documentation, and assisting Engagement Leads as they communicate with threat actors. You’ll help organizations navigate one of the most stressful moments of their business lifecycle with professionalism, empathy, and strategy. This junior-level position offers an excellent opportunity to receive hands‑on mentorship and real‑world experience in cybersecurity consulting, crisis response, and threat intelligence, with a clear path to grow into a full Engagement Lead role.

Core Duties & Responsibilities

• Gather key information from clients, legal teams, and insurance providers to scope new ransomware or cyber extortion incidents.
• Document and help identify key factors that may influence negotiation and response strategies.

Case Management & Documentation:

• Maintain accurate, real‑time documentation of ongoing case activities and threat actor communications.
• Organize, update, and track case files, ensuring they remain audit‑ready and accessible to the Incident Response team, adhering to best practices for data security and confidentiality.
• Help manage internal workflows to ensure all team members have the information they need at each stage of the incident.

Client Support & Communications:

• Assist with client‑facing updates, conveying crucial information in a clear, professional manner.
• Support senior team members to ensure consistent messaging and empathy during high‑pressure situations.
• Collaborate closely with senior negotiators to support active threat actor communications.
• Assist in gathering and synthesizing intelligence that informs negotiation strategies and client advisory.

Administrative & Operational Tasks:

• Perform general administrative tasks to support the Incident Response team’s operations, including scheduling, note‑taking, and ad hoc requests.
• Take on additional responsibilities as needed to ensure smooth execution of case strategies and deliverables.

What We’re Looking For

Experience:

• 1–2 years of professional experience in consulting, client services, project coordination, law, insurance, or a related field.
• No direct cybersecurity experience is required, but an interest in incident response, threat intelligence, or crisis communications is highly desirable.
• Must be authorized to work in the U.S. by the start of employment.
• Must be able to work remotely with reliable internet access.
• Maintains integrity and upholds ethical principles, even in challenging circumstances.
• Organizational Skills & Attention to Detail: Proven ability to maintain meticulous records and manage multiple tasks simultaneously.
• Prioritization & Multitasking: Skilled at navigating competing priorities and deadlines with ease.
• Collaboration & Teamwork: Enthusiastic about learning from and supporting senior negotiators; open to feedback and mentorship.
• Flexibility & Resilience: Willingness to occasionally work outside typical business hours due to the unpredictable nature of cyber incidents.

Chaintrax Cyber provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.