[Hiring] Incident Response Engagement-Lead @Cowbell

Role Description

Cowbell is seeking an experienced Incident Response Case-Lead to join our growing Resiliency Services. In this role, you will serve as a critical liaison among Cowbell’s Claims Team, breach counsel, Incident Response providers, and affected policyholders — guiding organizations through the full lifecycle of a cyber incident with technical depth, legal awareness, and clear communication. You will bring a specialized blend of hands-on forensic expertise, project management discipline, and the consulting acumen required to translate complex findings for diverse stakeholders under high-pressure conditions.

Key Responsibilities

• Lead and manage all phases of the incident response lifecycle — including scoping, containment, eradication, and recovery — across moderately complex, multi-system environments.
• Serve as the primary point of contact for Cowbell Claims Team, breach counsel, Incident Response providers, and policyholders throughout active engagements.
• Oversee the work of digital forensics and incident response providers, ensuring timely and accurate analysis of affected systems and environments.
• Identify and actively manage scope creep across concurrent engagements, maintaining project timelines and stakeholder alignment.
• Schedule, organize, and moderate the briefing of complex forensic findings into clear, actionable reporting tailored to technical, legal, and executive audiences.
• Operate with an understanding of Attorney-Client Privilege and Work Product Doctrine, ensuring appropriate handling of sensitive investigation materials in coordination with legal counsel.
• Collaborate cross-functionally with claims adjusters, underwriters, and external partners to support accurate incident documentation and coverage determinations.
• Contribute to the continuous improvement of Cowbell Resiliency Service’s incident response methodologies, playbooks, and tooling.

Qualifications

• 4–6 years of hands-on DFIR experience, with meaningful exposure to the cyber insurance ecosystem — including work with or on behalf of insurance carriers, breach counsel, and/or policyholders.
• Demonstrated experience managing the scoping, containment, eradication, and recovery phases of cyber incidents.
• Proven track record leading moderately complex, multi-system incident investigations, with strong project management skills and an ability to identify and control scope creep.
• Ability to operate effectively within legally sensitive environments, including an understanding of Attorney-Client Privilege and the Work Product Doctrine.
• Strong consulting and communication skills, with experience presenting forensic findings to mixed audiences including legal, technical, and executive stakeholders.

Education & Certifications

• A bachelor’s degree in Cybersecurity, Information Security Management, Digital Forensics, Computer Science, or a related field is preferred. In lieu of a degree, equivalent professional experience combined with one or more of the following industry certifications will be considered:
• GIAC Certified Incident Handler (GCIH)
• GIAC Network Forensic Analyst (GNFA)
• CompTIA Cybersecurity Analyst (CySA+)
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)

Equal Employment Opportunity

We are committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability, or veteran status.

Company Description

Cowbell is a leading innovator in cyber insurance, dedicated to empowering businesses to always deliver their intended outcomes as the cyber threat landscape evolves. Guided by our core values of TRUE—Transparency, Resiliency, Urgency, and Empowerment—we are on a mission to be the gold standard for businesses to understand, manage, and transfer cyber risk.

At Cowbell, we foster a collaborative and dynamic work environment where every employee is empowered to contribute and grow. We pride ourselves on our commitment to transparency and resilience, ensuring that we not only meet but exceed industry standards.

We are proud to be an equal opportunity employer, promoting a diverse and inclusive workplace where all voices are heard and valued. Our employees enjoy competitive compensation, comprehensive benefits, and continuous opportunities for professional development.

Cowbell is an E-Verify employer. E-Verify is a web-based system that allows an employer to determine an employee's eligibility to work in the US using information reported on an employee's Form I-9. The E-Verify system confirms eligibility with both the Social Security Administration (SSA) and Department of Homeland Security (DHS).

For more information, please visit Cowbell's website .