Lead Incident Response & Forensics Advisor

Arete Advisors, LLC; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Arete Advisors, LLC is seeking an experienced incident response professional to partner with the Engagement Lead, drive technical tasks, and support forensic collections and data recovery efforts. You will oversee remediation activities, ensure data preservation, and coordinate with multiple teams to deliver comprehensive engagement outcomes.

The role requires strong communication, leadership, and ability to translate complex technical findings into actionable guidance for clients, with on-site

Qualifications

• Bachelor's/technical degree and 6 years of relevant IT operations experience.
• Technical certifications (Cisco, Security+, Microsoft Server/Azure) preferred.
• Advanced knowledge across multiple technologies (MFA, storage, hypervisors, OS, networking).
• Experience rebuilding applications and Windows servers, domain controllers, and validating operations.

Responsibilities

• Partner with the Engagement Lead to manage technical tasks.
• Assist Client with immediate actions and SentinelOne agent installation/troubleshooting.
• Ensure data preservation steps and assist with forensic collections.
• Manage Infrastructure Recovery/Restoration and Decryption/Remediation efforts.
• Review backups and validate backup solutions.
• Escalate and resolve technical issues across teams and engagement lifecycle.
• Document activities, findings, and hourly time accurately.
• Provide on-site support or backfill for team members as needed.

Skills

Incident Response lifecycle

Explain technical to non-technical

Arete core offerings

Project leadership

Leadership & interpersonal

Communication & problem-solving

Customer service mindset

Automation scripting

Networking knowledge

Data encryption knowledge

Network diagrams reading

Persistence remediation

backup/restore troubleshooting

Education

Bachelor's degree or technical degree

Tools

PowerShell

Bash

Python

Job description

Arete Advisors, LLC is seeking an experienced incident response professional to partner with the Engagement Lead, drive technical tasks, and support forensic collections and data recovery efforts. You will oversee remediation activities, ensure data preservation, and coordinate with multiple teams to deliver comprehensive engagement outcomes.

The role requires strong communication, leadership, and ability to translate complex technical findings into actionable guidance for clients, with on-site