Senior Incident Responder, Remote

Somewhere in Asia tonight, a server room is on fire. Not literally — though sometimes it might as well be. A ransomware note is blinking on a managing director's screen in a tower above Singapore. A family office in Hong Kong is locked out of its own ledgers. A trading desk in Japan is running orders on paper. Across the South China Sea in the Philippines, a hospitality group has just learned its booking system isn't its own anymore.

Somewhere — Singapore, Hong Kong, Japan, the Philippines, Malaysia — a CIO is staring at the ceiling at three in the morning, wondering who to call.

That call comes to us.

Blackpanda is Asia's premier cyber crisis response firm — Lloyd's of London–accredited, regionally headquartered, and built for one purpose: to walk in when the worst has already happened, and walk out leaving the company still on its feet. We do incident response and digital forensics. That is it. No identity crisis about what we are. We are pure IR, and we like it that way.

We reach the market in three ways, and every channel feeds the same unit.

• Consulting. Hourly, senior-led engagements for enterprises and board-level matters where complexity, sensitivity, or scale demand our most experienced operators.
• IR-1. Our proprietary fixed-cost subscription is sold through IT channels and underwritten on our own insurance paper. IR-1 puts a real response solution in the hands of mid-market and small companies who have never been able to afford traditional cyber cover — paid up front, before the breach, with our team on the other end of every activation.
• Traditional cyber insurance. Full-stack policies for the mature, board-level buyer, with our response practice on the inside of every claim. Not a panel. Not a vendor. Our own people.

As a Lloyd's cover holder, the revenue arrives before the breach, not after it. Where traditional insurers park that float in markets, we pour ours straight back into the team — into people, training, tooling, and hours on the keyboard against real adversaries. Our gross margins run roughly two times those of traditional IR firms, and every point of that advantage compounds inside the unit.

At the centre of everything is the CIF.

Borrow the term from the special operations world and you'll understand what we mean by it. In extremis describes the moment a situation has moved beyond the tolerance of conventional units. When the building is already burning. When there is no time, no margin, no second chance. In-extremis forces are the no-fail option — who you call when calling anyone else means accepting the loss.

Blackpanda was founded by three former operators of the Commander's In-Extremis Force, one of five CIF teams the United States military positioned around the world, theirs based out of Okinawa. They built this firm because they had served inside the original — and they know what right looks like. How the best are selected. How the best are trained. How the best stand ready when the call comes.

They are building the cyber equivalent the only way they know how: same standards, same discipline, same refusal to compromise on who gets to wear the patch.

We set a hard floor under who is allowed in the room. Every responder on the CIF roster holds — or is actively earning — multiple SANS Institute certifications, the most rigorous DFIR qualifications in the field. Network forensics, enterprise cloud, Linux, Windows, adversary tradecraft. The company pays for the coursework. The company pays for the certifications. The bar is not negotiable.

By the end of 2026, Blackpanda expects to field 25 full-time incident responders — by a wide margin the largest pure-IR team in Asia-Pacific and Japan.…