Director, Cybersecurity Forensic & Litigation Consulting

Job Description

About the Role You will perform a wide range of cybersecurity engagements in a fast-paced, deadline-sensitive environment. You will lead technical workstreams to help triage breaches, analyse data quickly and to be able to understand underlying causesand issues. You will be able analyse data and solve problems in order to provide actionable answers. You will manage small delivery teams and coordinate and collaborate with other associated teams to deliver against your specific tasking. You will workas part of multi-functional teams to help clients manage and navigate breaches, and the operational, reputational and regulatory impacts they bring. You will work typically under legal privilege. You will support - or may have experience in providing - expertwitness. You will support and develop your skills around cyber incident response and investigations, developing both your technical and written skills to provide accurate and concise reports for a sophisticated client base of top-tier law firms, financialinstitutions and corporations. You will maintain or develop current knowledge of industry trends, threats, methodologies and core technologies in order to assimilate client needs and help decide appropriate courses of action. You will be able to participatein assessments of threats, risks and vulnerabilities, applying a combination of technical skills and critical thinking. You will deploy innovative techniques as part of your assessments and response to breaches. You will bring new approaches to client issues.You will help improve how we work, identifying areas for improvement and making suggestions to expand our portfolio of services, or improve our efficiency and effectiveness of delivery. You will have an established network of industry contacts and be buildingyour portfolio of resources. You will help shape and refine methodologies and approaches, in line with your experience and client needs. You will help mentor and shape the talent we attract to FTI. You will support junior team members, and contribute to ourcontinual development programme with suggestions and specific initiatives.You will research specific issues or topics, and create initiatives for other team members to perform similar as aligned to overall practice leaders direction. You will produce tangibleoutputs from these initiatives and be ready to present to clients, colleagues or external parties (technical or otherwise).How Youll GrowAlongside opportunities to learn on the job from some of the leading professionals in the industry, FTI Consulting offersextensive internal and external training opportunitiesQualifications & Experience Experience: as a director, you will already have appropriate work and team management experience. You will be recognizable as proven "talent". You are likely to have at least7 years experience in consulting, academia or in-house (including government or military). You will have an established understanding of cybersecurity, have a good breadth of practical experience and you are likely to have developed specific areas of depthand expertise which you will be looking to nurture. You will have a proven track record of strong delivery, and will already be recognized by peers and clients as someone who delivers quality impact. You will have managed teams, often in matrix environments.You will have demonstrable experience in working across varied projects, often under tight timelines, and maintaining quality, effectiveness and efficiency. You will have several of the following:1. Experience in working as lead incident first responder, helpingto understand initial situation, triage and initiate subordinate workstreams.2. Experience in leading related workstreams, which might be associated with but not limited to threat intelligence, threat hunting, indicators of targeting and/or compromise, post-incidenthardening, testing (specifically red teaming), remediation planning and improvement programmes.3. Appropriate industry certifications (eg OSCP/E, CREST, GIAC, TOGAF, MITRE, FAIR) and professional development programmes (CIISec, BCS, IEEE etc).4. Significantexperience of forensic incident handling procedures and processes and subject matter expertise in at least one of the following domains: The use of digital forensic investigation tools such as X-ways, Blacklight or Encase The forensic investigation of mobiledevices through both live and static methods. Static and dynamic malware analysis.5. International and multi-cultural work. Proficiency in another language would be beneficial.6. Experience in leading teams in corporate intelligence, cyber security or forensicscompanies; within military, law enforcement or government, or within in-house investigative or security functions.7. Experience in working under legal privilege, and demonstrable ability to produce written reports and oral briefings to meet typical requirements.The ability to help team members meet these quality standards.8. Experience in supporting - or acting as - expert witness for cyber related matters. Aptitude: you will have a natural curiosity and desire to learn. Youll show passion for specific areas relatedto cyber and be able demonstrate wider thinking and well-informed appreciation. You may have published articles, have your own development project or simply follow specific topics within choice media. You will have demonstrated ability, and be looking to furtheryour expertise in your journey with FTI. You will recognise the importance of continual development, and encourage those around you to develop.Critical thinking: you will be able to demonstrate the difference between technical and business success. Youcan make an informed, fact-based and objective analysis of an issue to come to a judgement. You can operate with a level of ambiguity and make logical assumptions when dealing with unknowns. You will demonstrate the ability to understand and deploy root causeanalysis to your engagements. Your professional record will show your ability to think through and add value to client needs, using your experience to understand explicit and implicit needs. Dynamism: you will be a self-starter who can work on varied assignmentsoften within tight timeframes. You will be comfortable in raising concerns or questions on a task in an efficient manner, and to be able to reach out for guidance when you feel uncertain. You will enjoy being given context, boundaries and an objective, andwill take professional pride in delivering. You will relish the opportunities provided to you within an agile environment. You will suggest improvements or solutions where you think things could be done better. Communications: you can communicate clearly,concisely and with understanding for your audience. In writing and orally. You will feel comfortable raising questions when you are uncertain. You may have experience working internationally, and with other teams that are not immediately p