Field Security Advisor

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI  the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running.

Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.

We have created a new standard in cyber extortion incident response and are expanding our Cyber Readiness & Advisory Services team to continue evolving the retained client experience. We are looking for a Field Security Advisor to help us develop and deliver valuable content, tabletop exercises, and training workshops to our enterprise customers.

In this role, you will work closely with our Customer Success team and Field CISO organization to help Global 2000 customers prepare executive, technical, finance, legal, and operational teams for the realities of handling a cyber extortion incident and improving organizational resiliency.

Coveware is a fully distributed company with employees across multiple geographies. This is a remote role with global time zone flexibility. Candidates may be based in any geography as long as they can provide reliable overlap with customer time zones and travel periodically for customer on-sites and events.

This is an individual contributor role. The role reports to the Senior Director, Field CISO within the Cyber Readiness and Advisory Services team.

• Deliver cyber extortion readiness engagements for retained enterprise customers, including executive briefings, technical workshops, and cross-functional training sessions.
• Design and facilitate tabletop exercises that reflect realistic cyber extortion conditions, operational disruption, ambiguous early facts, and executive decision points.
• Curate and continuously improve customer-facing content, including playbooks, decision frameworks, readiness checklists, and workshop materials, keeping deliverables aligned to current ransomware/extortion patterns.
• Conduct research and forensic data analysis to support advisory deliverables and customer insights, including synthesizing lessons learned from case trends and interpreting forensic outputs/artifacts (as available) into clear, actionable readiness recommendations.
• Support the customer lifecycle as needed, including customer due diligence requests, RFP/RFI questionnaires, and review of contracts/security exhibits in partnership with internal stakeholders.
• Collaborate internally with case management, SMEs, and other stakeholders to ensure readiness guidance stays grounded in real-world incident behavior and recovery constraints.

• Incident Response / Digital Forensics and Incident Response (DFIR) tools and methodologies
• Security Operations platforms and processes
• Cybersecurity advisory and consulting frameworks
• MITRE ATT&CK
• NIST Cybersecurity Framework (CSF)
• CIS Controls
• Forensic analysis tools and artifacts
• Ransomware and cyber extortion readiness frameworks

• 7+ years of experience in information security/cybersecurity, with depth in one or more of:
  • Incident response / DFIR
  • Security operations
  • Cyber risk / security advisory / consulting
• 3+ years of customer-facing experience supporting B2B enterprise customers in advisory, incident readiness, cybersecurity, technology, or forensics-related services.
• Foundational knowledge of application, identity, cloud and network security concepts,…