About the Role

We have created a new standard in cyber extortion incident response and are expanding our Cyber Readiness & Advisory Services team to continue evolving the retained client experience. We are looking for a Field Security Advisor to help us develop and deliver valuable content, tabletop exercises, and training workshops to our enterprise customers.

In this role, you will work closely with our Customer Success team and Field CISO organization to help Global 2000 customers prepare executive, technical, finance, legal, and operational teams for the realities of handling a cyber extortion incident and improving organizational resiliency.

Coveware is a fully distributed company with employees across multiple geographies. This is a remote role with global time zone flexibility. Candidates may be based in any geography as long as they can provide reliable overlap with customer time zones and travel periodically for customer on-sites and events.

This is an individual contributor role. The role reports to the Senior Director, Field CISO within the Cyber Readiness and Advisory Services team.

What You'll Do

• Deliver cyber extortion readiness engagements for retained enterprise customers, including executive briefings, technical workshops, and cross-functional training sessions.
• Design and facilitate tabletop exercises that reflect realistic cyber extortion conditions, operational disruption, ambiguous early facts, and executive decision points.
• Curate and continuously improve customer-facing content, including playbooks, decision frameworks, readiness checklists, and workshop materials, keeping deliverables aligned to current ransomware/extortion patterns.
• Conduct research and forensic data analysis to support advisory deliverables and customer insights, including synthesizing lessons learned from case trends and interpreting forensic outputs/artifacts (as available) into clear, actionable readiness recommendations.
• Support the customer lifecycle as needed, including customer due diligence requests, RFP/RFI questionnaires, and review of contracts/security exhibits in partnership with internal stakeholders.
• Collaborate internally with case management, SMEs, and other stakeholders to ensure readiness guidance stays grounded in real-world incident behavior and recovery constraints.

Technologies You'll Work With

• Incident Response / Digital Forensics and Incident Response (DFIR) tools and methodologies
• Security Operations platforms and processes
• Cybersecurity advisory and consulting frameworks
• MITRE ATT&CK
• NIST Cybersecurity Framework (CSF)
• CIS Controls
• Forensic analysis tools and artifacts
• Ransomware and cyber extortion readiness frameworks

What You'll Bring

• 7+ years of experience in information security/cybersecurity, with depth in one or more of:
  • Incident response / DFIR
  • Security operations
  • Cyber risk / security advisory / consulting
• 3+ years of customer-facing experience supporting B2B enterprise customers in advisory, incident readiness, cybersecurity, technology, or forensics-related services.
• Foundational knowledge of application, identity, cloud and network security concepts, and incident response best practices, ideally in a Global 2000 enterprise environment.
• Demonstrated experience presenting in a consultative manner to enterprise leadership and facilitating educational workshops and tabletop exercises.
• Ability to communicate complex topics clearly and authoritatively to diverse audiences, orally and in writing.
• Willingness and ability to travel for customer meetings, workshops, and events on occasion.
• Comfortable leading discussions with enterprise stakeholders across both technical and executive teams.
• Consultative/advisory mindset with structured problem framing, strong facilitation skills, crisp communication, and defensible recommendations.
• Strong listening skills with excellent written and verbal communication skills and willingness to deliver hard truths when needed to surface gaps and drive improvement.
• Strong, structured writing skills with experience producing executive-ready, evidence-based deliverables, translating complex inputs into clear narratives, prioritized recommendations, and defensible documentation.

Bonus Skills

• One or more information security certifications (e.g., CISSP, CISM, CISA, CCSP, GCIH, GCFE, GCFA).
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field.
• Experience translating forensic findings and incident learnings into executive-ready narratives and prioritized readiness actions.
• Familiarity with frameworks/standards such as MITRE ATT&CK, NIST CSF and CIS Controls and how to apply them pragmatically to cyber defense and recovery.
• Experience collaborating with teammates to stay current on the threat landscape and continuously improve customer-facing materials.