Leads complex cybersecurity incident response, digital forensics, threat hunting, compromise assessments, and incident readiness engagements. Serves as a client-facing technical lead for ransomware, cloud compromise, insider threat, and unauthorized access investigations. Directs evidence collection, forensic analysis, remediation planning, reporting, and executive briefings while mentoring consultants and improving service offerings. Requires 5–8 years of cybersecurity experience, advanced investigative expertise, client consulting skills, and availability for 25–40% travel plus 24/7 incident response coverage.