Cybersecurity Resilience Lead

Working with incident responders, threat hunters, infrastructure engineers, reverse engineers and operations teams, you will help customers improve readiness before an incident and strengthen durable response capability after lessons learned. As a Resilience Lead, you will orchestrate evidence-driven proactive engagements, align stakeholders and communicate clear priorities, recommendations, and readiness improvements to customers. ● Set resilience engagement objectives, customer outcomes, priorities and evidence

requirements; lead proactive workstreams across enterprise on-premises and cloud environments. ● Design and deliver readiness assessments, tabletop exercises, cyber range simulations, playbook development and threat modelling engagements that improve incident response readiness. ● Translate technical and operational findings into clear priorities, risk reduction actions and executive-ready recommendations. ● Lead workshops that would include: Assess customer incident response plans, roles, escalation paths, communication models, evidence readiness and recovery dependencies; establish what is mature, what remains uncertain and what needs further validation. ● Lead customer workshops and stakeholder discussions that align technical and operational teams, executives and other core business functions around practical response improvements. ● Partner with internal resources incident response, threat hunting, infrastructure, reverse engineering, product and operations teams to improve service capabilities and offering quality. ● Use customer feedback, field insights and lessons learned to improve resilience offerings, engagement methods and DART readiness practices. ● Maintain engagement documentation covering objectives, decisions, risks, dependencies and next actions; support final reporting and lessons learned. Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience. Experience in incident response, incident management, crisis management, resilience, security operations, or enterprise risk reduction. Demonstrated experience planning, coordinating, delivering, and evaluating business resilience exercises (e.g. tabletops, cybersecurity workshops, readiness assessments, incident response plans, or operational resilience engagements) Experience reviewing, assessing, and developing resilience related technical and operational programs/plans. Including but not limited to business continuity management, crisis management, operational resilience, technical resilience, and incident response. Proven ability to evaluate, support understanding, and communicate improvement opportunities of the stakeholder cybersecurity related technical and operational risk landscape through consolidation of inputs, assessment of disruption risks, and communication of suggested remediation efforts. Demonstrated ability to guide stakeholders, build agreement and translate technical issues into practical actions for teams with different levels of technical knowledge. Experience applying cybersecurity or resilience frameworks such as NIST, MITRE ATT&CK, ISO 27001 or equivalent guidance in customer-facing work to support findings and improvement suggestions. Customer-facing written and verbal communication, including executive briefings, facilitation and clear documentation. Evidence of sound judgement, accurate record keeping, operational discipline and effective follow-the-sun handovers. Flexibility to work non-standard business hours that may include evening, nighttime, weekends and/or holidays. Experience delivering cyber range exercises, tabletop exercises, purple-team style scenarios or customer readiness programmes. Proven track record leading or developing enterprise business continuity, crisis management, or incident response programs Cloud security experience in hybrid environments and practical understanding of identity, endpoint, network and recovery dependencies. Demonstrated research, process improvement, offering development or technical mentoring that strengthens resilience capability. Certifications such as CISSP, CISM, DRI, GIAC or equivalent practical expertise. Resilience under stress and ability to collaborate across globally distributed teams, customers and partners.