State Licensed DFIR Examiner

Key Responsibilities: Lead and coordinate responses to cybersecurity incidents, including analysis and investigation of security breaches Conduct direct communications and negotiations with Threat Actors during ransomware and extortion incidents Prepare detailed incident reports and maintain accurate documentation of all investigations and response activities

Required Qualifications: Strong knowledge of digital forensics tools and techniques Experience with incident response frameworks and methodologies (e.g., NIST, SANS) Demonstrated experience in Threat Actor communications and high-stakes negotiations Understanding of ransomware and data-extortion ecosystems Strong written documentation skills for maintaining communication logs and negotiation summaries