Cyber Incident Response Associate

Job Summary & Objectives

DigitalMint is seeking a Cyber Incident Response Associate to join our Cyber Settlement division. You will be trained as a point of contact for clients, leading threat actor negotiations and intelligence gathering for ransomware incidents. In this position, you should have experience in Cyber Threat Intelligence (CTI), and Digital Forensics and Incident Response (DFIR).

What You’ll Do

• Handle and lead scoping calls related to ransomware incidents with DFIR firms, cyber insurance carriers, & breach counsel.
• Own the ransomware negotiations life cycle from scoping calls to cryptocurrency payment facilitations, which includes coordinating and managing all key stakeholders involved in each case.
• Proactively promote the DigitalMint ransomware services to industry contributors such as DFIRs, cyber carriers, & cyber law firms.
• Work closely with DigitalMint Management Team to establish & execute a cutting-edge consulting practice.
• Continuously research all the major (and upcoming) ransomware variant threat groups, collect key data on all cases, and provide scheduling reporting to key industry players.
• Regularly monitor Threat Actor leak sites for current affected clients.
• Work closely with DigitalMint Compliance Team on best practices and iterating the optimal on-boarding process for new clients during incidents
• Maintain a pursuit of knowledge for incident response through training exercises to consistently develop an understanding of security practices
• Develop knowledge of governance and risk standards and practices
• Provide off-hours support as required

What We’re Looking For

• Experience with cyber security, threat intelligence, incident response, and/or security services account management
• Demonstrated ability to think strategically and develop/execute corresponding objectives
• Strong verbal and written communications, as well as the ability to work effectively across internal and external organizations
• An understanding of the cyber landscape including types of adversaries and the motivations that drive them is required
• Ability to communicate situations to technical and non-technical audiences and senior management