Engagement Lead - Remote

Engagement Lead - Remote

Arete is seeking an experienced Engagement Lead for our Incident Response team. The role is remote with occasional travel.

• Respond to Client, Counsel, Carrier (CCC) in accordance with Key Performance Indicators (KPIs) and urgency of requests.
• Manage and oversee all team members’ activities and communications during engagements.
• Lead technical conversations and drive engagement direction and strategy.
• Educate clients on informed decision making and cost vs. benefit analysis.
• Maintain accountability for password changes within 24 hours.
• Build and deliver engagement strategy, including recovery plans and prioritization.
• Serve as subject matter expert on technologies, infrastructure, and engagement‑specific items.
• Track progress to completion.
• Communicate clearly, set priorities, and ensure each team member understands their tasks and timeline.
• Ensure project work streams meet deadlines and budget requirements.
• Maintain daily time entries and budget accuracy, identify overages and request amendments at 75 % threshold.
• Utilize engagement team at a blended 70 % capacity.
• Identify opportunities for add‑on services with Arete resources.
• Validate work product quality and provide routine updates to CCC.
• Ensure on‑time delivery based on SLA or as needed.
• Coach and mentor junior team members.
• Propose tactics and strategies to improve overall processes.
• Perform additional duties assigned by management.

• Excellent time management and organizational skills.
• Widely recognized technical abilities.
• Teaching and mentoring skills.
• Adaptability in conversational style.
• Expertise in managing client expectations.
• Independent training and leadership of global teams.
• Project leadership with security implementations.
• Background in network enterprise systems administration.
• Knowledge of operating systems and hardware:
  Linux/Unix, Mainframe, Windows, Cloud.
• Experience with core industry technologies and cybersecurity tools (knowledge of, not necessarily hands‑on).
• Endpoint Detection and Response (EDR) solutions;
• Microsoft Office 365, Exchange, Google Workspace;
• AV vendors;
• IAM/Zero Trust systems;
• Disaster Recovery plans;
• Firewall and VPN platforms;
• Remote access tools;
• Enterprise architecture knowledge (network segmentation, cloud platforms: AWS, Azure, GCP), on‑premises technologies, security information event management (SIEM), MFA, DMZ configurations;
• Containment, preservation, and acquisition of data in compromised environments.
• Email server expertise (on‑prem, cloud, third‑party) and log collection.
• Ability to direct IT personnel for log collection and secure configurations.

• Minimum 7 years conducting digital investigations or leading full‑cycle incident response for a major consulting or global IR firm.
• Bachelor’s degree in computer science‑related discipline with 8+ years experience or Master’s degree with 6+ years experience, or J.D. with 4+ years experience.
• At least one industry certification: GCFA, GCFE, GCIH, GISP, CISSP, Security+, MCSC, Network+, or equivalent.

• Seniority level:
  Mid‑Senior
• Employment type:
  
  Full‑time
• Job function:
  Consulting, Information Technology, and Sales
• Industries:
  Computer and Network Security
• Location:
  
  Remote (occasional travel)

We’re proud to be an equal‑opportunity employer and celebrate our employees’ differences, regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status. Different makes us better.

The above statements are intended to describe the general nature and level of work being performed. They are not an exhaustive list of duties, responsibilities, or skills required for this position.

The work environment is typical office conditions. Reasonable accommodation may be made to enable people with disabilities to perform essential functions.

• Minimal physical exertion.
• Travel within or outside the state.
• Light work: lifting up to 20 pounds occasionally.

Salary and benefits are paid according to Arete’s policy. The position is exempt from overtime provisions under the Fair Labor Standards Act.

The Arete Incident Response Human Resources Department reserves the right to modify this job description as needed.