Cyber Incident Response Associate; Threat Actor Negotiation Support

HQ - Chicago | Position - Remote or Hybrid

Digital Mint is seeking a detail-oriented and proactive Cyber Incident Response Associate to join our team specializing in threat actor negotiation support. In this role, you will be on the front lines of active cyber extortion cases—coordinating new incident intake, managing case documentation, and assisting Engagement Leads as they communicate with threat actors. You’ll help organizations navigate one of the most stressful moments of their business lifecycle with professionalism, empathy, and strategy.

This junior-level position offers an excellent opportunity to receive hands-on mentorship and real-world experience in cybersecurity consulting, crisis response, and threat intelligence, with a clear path to grow into a full Engagement Lead role.

• Gather key information from clients, legal teams, and insurance providers to scope new ransomware or cyber extortion incidents.
• Document and help identify key factors that may influence negotiation and response strategies.

• Maintain accurate, real-time documentation of ongoing case activities and threat actor communications.
• Organize, update, and track case files, ensuring they remain audit-ready and accessible to the Incident Response team, adhering to best practices for data security and confidentiality.
• Help manage internal workflows to ensure all team members have the information they need at each stage of the incident.

• Assist with client-facing updates, conveying crucial information in a clear, professional manner.
• Support senior team members to ensure consistent messaging and empathy during high-pressure situations.
• Collaborate closely with senior negotiators to support active threat actor communications.
• Assist in gathering and synthesizing intelligence that informs negotiation strategies and client advisory.

• Perform general administrative tasks to support the Incident Response team’s operations, including scheduling, note-taking, and ad hoc requests.
• Take on additional responsibilities as needed to ensure smooth execution of case strategies and deliverables.

• 1–2 years of professional experience in consulting, client services, project coordination, law, insurance, or a related field.
• No direct cybersecurity experience is required, but an interest in incident response, threat intelligence, or crisis communications is highly desirable.
• Must be authorized to work in the U.S. by the start of employment.
• Must be able to work remotely with reliable internet access.
• Maintains integrity and upholds ethical principles, even in challenging circumstances.
• Organizational Skills & Attention to Detail:
  Proven ability to maintain meticulous records and manage multiple tasks simultaneously.
• Prioritization & Multitasking:
  Skilled at navigating competing priorities and deadlines with ease.
• Collaboration & Teamwork:
  Enthusiastic about learning from and supporting senior negotiators; open to feedback and mentorship.
• Flexibility & Resilience:
  Willingness to occasionally work outside typical business hours due to the unpredictable nature of cyber incidents.

• Competitive salary and bonus eligibility.
• Premium Medical, Dental, and Vision insurance offerings.
• Flexible, unlimited, PTO eligibility immediately upon hire.
• 401(k) retirement plan with company contribution.
• Monthly pre-tax transit benefit.
• Daily $12 lunch subsidy.
• Fully stocked kitchen.
• Discounted gym membership.
• Exciting culture in a fast-growing industry.