Lead and perform end-to-end forensic investigations and incident response for complex cyberattacks. Conduct log, host, network, memory, and malware analysis; threat hunt for APTs; identify IOCs/TTPs; use and improve investigation tooling and playbooks; communicate findings and recommendations to technical and executive stakeholders.

Lead and manage complex incident response engagements and threat hunting, oversee forensic teams, advise C-level stakeholders, coordinate containment and remediation, and improve IR methodologies and reporting.