Cyber Incident Response Lead and Technical Advisor

Arete Advisors LLC; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Arete Advisors LLC is seeking an experienced Incident Response Lead to partner with the Engagement Lead, drive technical tasks, and guide forensic collections. You will support clients during critical actions, manage restoration, and ensure backups and encryption are properly validated.

The role requires deep incident lifecycle knowledge, strong communication with non-technical audiences, and the ability to coordinate across multiple teams.

Qualifications

• Experience in IT operations and incident response lifecycle.
• Ability to communicate technical topics to non-technical audience.
• Familiarity with backups, encryption, and forensics tools.

Responsibilities

• Partners with the Engagement Lead to manage the overall technical tasks.
• Assists the Client with the completion of immediate actions.
• Assists the Client with SentinelOne (S1) agent installation and troubleshooting.
• Ensures data preservation steps are taken and assists with forensic collections.
• Manages Infrastructure Recovery/Restoration and Decryption/Remediation efforts.
• Reviews backup solutions and assists with the validation of backups.
• Consults on the resolution of all technical issues such as EDR deployment, troubleshooting, forensics collections, and onsite restoration.
• Ensures the Strategic Plan contains comprehensive technical details and identifies additional technical resources based on Strategic Plan task list and milestones set by the EL.
• Serves as an internal expert on the entire engagement lifecycle and portfolio of services at a technical level.
• Serves as an escalation point for Technical Advisor, Engineer, and Technician positions for both technical and non-technical issues.
• Ensures all activities, findings, and hourly time are properly documented.
• Backfills the EL as needed on kickoff calls and daily update calls, etc. and may also fill in for other team members such as SOC or Forensics, depending on their experience and skillset.
• Interfaces with the client’s technical team members, outside technical teams, the EL, the Project Manager and other Arete Teams to ensure the overall technical success of the engagement.
• Clearly articulates technical recommendations for enhancing client cybersecurity and/or IT infrastructure both verbally and in writing (as directed by Counsel).
• May train or mentor other technical roles
• Identifies and escalates underperforming team members to help expedite Client recovery efforts and identify mentoring opportunities
• Prioritizes, actions upon, and delegates instructions and tasks provided by the EL
• May perform other duties as assigned by management

Skills

Incident response

Forensics

PowerShell

Scripting

Communication

Education

Bachelor's degree in IT/CS

Tools

SentinelOne

EDR

VMware/Hyper-V

Windows Server

Job description

Arete Advisors LLC is seeking an experienced Incident Response Lead to partner with the Engagement Lead, drive technical tasks, and guide forensic collections. You will support clients during critical actions, manage restoration, and ensure backups and encryption are properly validated.

The role requires deep incident lifecycle knowledge, strong communication with non-technical audiences, and the ability to coordinate across multiple teams.