AI Incident Response Lead

Lead response to AI-system compromise — prompt injection, model abuse, data leakage — coordinating containment and recovery.

The AI Incident Response Lead runs our most serious engagements end to end. When a client's AI system is compromised — through prompt injection, model abuse, agent hijacking, or data leakage — you lead containment, forensics, root-cause analysis, and recovery.

You will be the calm, senior voice in the room, coordinating with client engineering and briefing executives while the team works the problem. You will also turn each incident into reusable playbooks that strengthen the whole practice.

• Lead incident-response engagements involving AI and LLM systems
• Coordinate with client engineering teams during active incidents
• Perform forensics and root-cause analysis on AI compromises
• Develop AI incident-response playbooks and procedures
• Deliver executive briefings on incident status and findings

• Bachelor's degree required;
  Master's preferred
• 7+ years of incident response or digital forensics experience
• Exposure to AI/LLM systems and their failure modes
• GCIH, GCFA, or equivalent certifications
• Demonstrated ability to lead IR engagements independently

• Experience building or maturing an IR function
• Familiarity with cloud and container forensics
• Public speaking or incident-debrief experience