Cyber Incident Response Engagement Lead (Threat Actor Communications)

Digital Mint; Chicago (IL); Remote; USD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a calm and thoughtful communicator to lead cyber incident response efforts. In this fully remote role, you will serve as the primary point of contact for clients facing ransomware and cyber threats, guiding them through high-pressure situations with professionalism and empathy. Your responsibilities will include developing communication strategies, coordinating with various stakeholders, and maintaining precise documentation. This position is ideal for those who thrive in fast-paced environments and are motivated to make a meaningful impact in the field of cyber incident response. Join a dynamic team and contribute to safeguarding clients during critical moments.

Benefits

Competitive salary and bonus eligibility

Premium Medical, Dental, and Vision insurance

Flexible, unlimited PTO

401(k) retirement plan with company contribution

Monthly pre-tax transit benefit

Daily $12 lunch subsidy

Fully stocked kitchen

Discounted gym membership

Exciting culture in a fast-growing industry

Qualifications

• Experience in consulting, crisis communication, or cyber insurance is essential.
• Excellent written and verbal skills are crucial for this role.

Responsibilities

• Lead communication during cyber incidents and provide structured guidance.
• Develop negotiation tactics and maintain documentation of communications.

Skills

Crisis Communication

Negotiation Skills

Documentation Management

Cross-Functional Team Collaboration

Written Communication

Verbal Communication

Education

Bachelor's Degree in Relevant Field

Job description

Cyber Incident Response Engagement Lead (Threat Actor Communications)

Chicago, IL

HQ

Remote

Full Time

Job Summary & Objectives

DigitalMint is seeking a calm, thoughtful communicator to lead front-line response and communication efforts during active cyber extortion incidents. As an Engagement Lead, you will be the primary point of contact for clients navigating ransomware and other high-pressure cyber threats. You will work closely with legal counsel, insurance teams, and our internal specialists to guide negotiation strategies with threat actors, ensuring clarity, professionalism, and empathy from start to finish. This fully remote, non-technical, and non-managerial role is well-suited for professionals who thrive in high-stakes, fast-paced environments and are motivated to make a meaningful impact in cyber incident response.

Core Duties & Responsibilities

Incident Response Leadership & Coordination:

• Serve as the main point of contact during ransomware and extortion incidents, providing structured guidance and calm leadership.
• Own communication strategies with threat actors, drafting and refining messages that align with client objectives.
• Facilitate coordination among stakeholders, including lawyers, insurers, brokers, and internal teams.

Threat Actor Communications & Negotiation Strategy:

• Develop and implement negotiation tactics that align with overall incident response goals.
• Collaborate with technical and non-technical teams to gather relevant intel for shaping communication strategies.
• Provide timely updates to clients, ensuring they understand the risks, options, and recommended next steps at each stage.

Documentation & Case Management:

• Maintain precise, real-time documentation of all communications, decisions, and key actions.
• Keep case files organized and audit-ready, adhering to best practices for data security and confidentiality.
• Work closely with other members of the Cyber Incident Response team to ensure a seamless response process—no silos, no egos.
• Support incident response activities by sharing insights, flagging concerns, and contributing to strategic decision-making in a high-stress environment.

What We’re Looking For

Experience:

• Relevant professional background in consulting, crisis communication, cyber insurance, legal, or similarly high-pressure, client-facing fields.
• Prior experience with cyber incident response, negotiations, or threat intelligence is a plus, but not required.
• Must be authorized to work in the U.S. and have reliable internet access.
• Availability to work occasional non-standard hours due to the unpredictable nature of cyber incidents.
• Maintains integrity and upholds ethical principles, even in challenging circumstances.
• Excellent written and verbal skills, with the ability to stay composed and empathetic under pressure.
• Strong consulting abilities and a measured tone when interacting with stakeholders.
• Proven track record of managing documentation and workflows efficiently.
• Demonstrated success working in cross-functional teams, especially in fast-changing environments.
• Ability to evaluate complex situations quickly and offer clear, actionable recommendations.

Employee Benefits

• Competitive salary and bonus eligibility.
• Premium Medical, Dental, and Vision insurance offerings.
• Flexible, unlimited, PTO eligibility immediately upon hire.
• 401(k) retirement plan with company contribution.
• Monthly pre-tax transit benefit.
• Daily $12 lunch subsidy.
• Fully stocked kitchen.
• Discounted gym membership.
• Hybrid/Remote work schedule (this role is Remote-US).
• Exciting culture in a fast-growing industry.

Reach out to us today!

To apply, submit your resume below. Please include the job title for which you are applying in the subject line. Qualified Candidates selected for further consideration will be contacted directly.

DigitalMint provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.