Cyber Incident Response Manager

Chaintrax Cyber; Chicago (IL); Remote; USD 90,000 - 140,000; Full time

Job summary

Chaintrax Cyber seeks an Engagement Lead to guide front-line communications during active cyber extortion events. You’ll be the main client contact, drafting messages, coordinating with lawyers, insurers, and internal teams to keep stakeholders informed with clarity and empathy.

This is a remote/hybrid, non-technical, non-managerial role for professionals who excel under pressure and want to make a meaningful impact in cyber incident response.

Qualifications

• Relevant professional background in consulting, crisis communication, cyber insurance, legal, or similarly high-pressure, client-facing fields.
• Prior experience with cyber incident response, negotiations, or threat intelligence is a plus, but not required.
• Must be authorized to work in the U.S. and have reliable internet access.
• Availability to work occasional non-standard hours due to the unpredictable nature of cyber incidents.
• Maintains integrity and upholds ethical principles, even in challenging circumstances.
• Communication & Negotiation: Excellent written and verbal skills, with the ability to stay composed and empathetic under pressure.
• Client-Facing Expertise: Strong consulting abilities and a measured tone when interacting with stakeholders.
• Organizational & Detail-Oriented Approach: Proven track record of managing documentation and workflows efficiently.
• Collaboration & Adaptability: Demonstrated success working in cross-functional teams, especially in fast-changing environments.
• Critical Thinking & Decision-Making: Ability to evaluate complex situations quickly and offer clear, actionable recommendations.

Responsibilities

• Lead front-line communication and calm leadership during ransomware and extortion incidents.
• Own communication strategies with threat actors, drafting messages aligned with client objectives.
• Coordinate among lawyers, insurers, brokers, and internal teams.
• Develop negotiation tactics that support incident response goals.
• Provide timely updates to clients, outlining risks, options, and recommended next steps.
• Maintain precise, real-time documentation of all communications and actions.

Skills

Crisis communication

Client-facing

Incident response

Negotiation

Documentation

Cross-functional teamwork

Job description

Bring your expertise to a team focused on solving complex challenges across blockchain investigations, cybersecurity, and financial crime.

Chicago Remote or Hybrid

Job Summary & Objectives

• Chaintrax Cyber is seeking a calm, thoughtful communicator to lead front-line response and communication efforts during active cyber extortion incidents. As an Engagement Lead, you will be the primary point of contact for clients navigating ransomware and other high-pressure cyber threats. You will work closely with legal counsel, insurance teams, and our internal specialists to guide negotiation strategies with threat actors, ensuring clarity, professionalism, and empathy from start to finish. This fully remote, non-technical, and non-managerial role is well-suited for professionals who thrive in high-stakes, fast-paced environments and are motivated to make a meaningful impact in cyber incident response.

Core Duties & Responsibilities

Incident Response Leadership & Coordination:

• Serve as the main point of contact during ransomware and extortion incidents, providing structured guidance and calm leadership.
• Own communication strategies with threat actors, drafting and refining messages that align with client objectives.
• Facilitate coordination among stakeholders, including lawyers, insurers, brokers, and internal teams.

Threat Actor Communications & Negotiation Strategy:

• Develop and implement negotiation tactics that align with overall incident response goals.
• Collaborate with technical and non-technical teams to gather relevant intel for shaping communication strategies.
• Provide timely updates to clients, ensuring they understand the risks, options, and recommended next steps at each stage.

Documentation & Case Management:

• Maintain precise, real-time documentation of all communications, decisions, and key actions.
• Keep case files organized and audit-ready, adhering to best practices for data security and confidentiality.
• Work closely with other members of the Cyber Incident Response team to ensure a seamless response process—no silos, no egos.
• Support incident response activities by sharing insights, flagging concerns, and contributing to strategic decision-making in a high-stress environment.

What We’re Looking For

Experience:

• Relevant professional background in consulting, crisis communication, cyber insurance, legal, or similarly high-pressure, client-facing fields.
• Prior experience with cyber incident response, negotiations, or threat intelligence is a plus, but not required.
• Must be authorized to work in the U.S. and have reliable internet access.
• Availability to work occasional non-standard hours due to the unpredictable nature of cyber incidents.
• Maintains integrity and upholds ethical principles, even in challenging circumstances.
• Communication & Negotiation: Excellent written and verbal skills, with the ability to stay composed and empathetic under pressure.
• Client-Facing Expertise: Strong consulting abilities and a measured tone when interacting with stakeholders.
• Organizational & Detail-Oriented Approach: Proven track record of managing documentation and workflows efficiently.
• Collaboration & Adaptability: Demonstrated success working in cross-functional teams, especially in fast-changing environments.
• Critical Thinking & Decision-Making: Ability to evaluate complex situations quickly and offer clear, actionable recommendations.

Chaintrax Cyber provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.