Field Security Advisor

Role overview A remote advisory position dedicated to helping large enterprise clients prepare executive, technical, finance, legal, and operational teams to handle cyber extortion incidents. The role sits within a Cyber Readiness & Advisory Services team focused on elevating how organizations build resilience against ransomware and extortion threats. It is an individual contributor position reporting to senior field security leadership, with global time zone flexibility and periodic travel for on-sites and events.

Responsibilities - Lead readiness engagements for retained enterprise customers through executive briefings, technical workshops, and cross-functional training sessions. - Design and run tabletop exercises that replicate ambiguous early facts, operational disruption, and executive-level decision points. - Build and continuously refine customer-facing playbooks, decision frameworks, readiness checklists, and workshop materials that reflect current extortion patterns. - Conduct research and forensic data analysis to convert case patterns and lessons learned into actionable readiness recommendations. - Support customer lifecycle activities such as due diligence reviews, RFP/RFI questionnaire responses, and security exhibit evaluations. - Partner with case management and internal subject matter experts to keep advisory guidance grounded in real-world incident behavior.

Requirements - Seven or more years of experience in information security or cybersecurity, with depth in incident response, DFIR, security operations, or cyber risk/advisory consulting. - Three or more years in customer-facing roles supporting large B2B enterprise accounts in advisory, incident readiness, or related services. - Working knowledge of application, identity, cloud, and network security concepts, alongside incident response best practices in enterprise environments. - Demonstrated track record presenting consultatively to senior executives and facilitating workshops or tabletop exercises. - Ability to explain complex security topics clearly to varied audiences, both verbally and in writing. - Willingness and ability to travel periodically for customer meetings, workshops, and events.

Nice to have - Hands-on familiarity with DFIR tooling, MITRE ATT&CK, NIST CSF, CIS Controls, and ransomware or cyber extortion readiness frameworks. - Experience interpreting forensic artifacts and outputs into clear, actionable advisory recommendations.

Benefits and work setup - Fully remote with global time zone flexibility for candidates in any geography who can maintain reliable overlap with customer time zones. - Health coverage, retirement plans, and unlimited paid time off. - Family-forming support plus paid volunteer hours. - 24/7 virtual veterinary care at no cost. - Legal services, identity protection, and supplemental health insurance options. - Tax-advantaged spending accounts for healthcare, dependent care, and commuting. - Learning resources including on-demand libraries, mentoring, workshops, and annual learning events.