Remote Digital Forensic Jobs in Madison, AL (NOW HIRING)

Job Title: Senior Consultant – Threat Actor Communications & Intelligence 

Location: Remote 

Reports To: Director or Managing Director, Threat Actor Communications and Intelligence 

Job Type: Full-Time | Senior-Level | Cybersecurity 

Position Summary: 

We are seeking a highly skilled and composed Senior Consultant to join our Strategic Threat Actor Communications and Intelligence team, specializing in threat actor communications and ransomware negotiations. This role is ideal for professionals with deep experience in ransomware threat intelligence, direct negotiation with threat actors, and a strong understanding of the legal, ethical, and operational complexities of extortion-based incidents. A background in law enforcement or crisis negotiation is a strong plus. 

Key Responsibilities: 

·         Serve as the primary liaison for communications with ransomware threat actors during active extortion incidents. 

·         Participate in ransomware negotiation strategies, including payment discussions, deadline extensions, and data recovery assurances. 

·         Analyze and interpret the behavior, language, and tactics of threat actors to inform negotiation posture and risk assessment. 

·         Collaborate with legal counsel, clients, and internal teams to ensure alignment on negotiation strategy and communication tone. 

·         Maintain accurate and detailed documentation of all communications, decisions, and outcomes. 

·         Provide verbal and written updates to clients, legal teams, and executive stakeholders. 

·         Contributes to the development of playbooks, SOPs, and threat actor profiles. 

·         Support post-incident reporting and debriefs, including lessons learned and strategic recommendations. 

Qualifications: 

Required Experience: 

·         2+ years of experience in cybersecurity, with a focus on ransomware response, threat intelligence, or incident response. 

·         Direct experience in threat actor communications and/or ransomware negotiations. 

·         Familiarity with ransomware groups, extortion tactics, and cryptocurrency payment processes. 

Preferred Background: 

·         Law enforcement, military, crisis, or ransom negotiation experience is highly desirable. 

·         Experience working with legal counsel and cyber insurance carriers during high-stakes incidents. 

Technical Skills: 

·         Understanding of ransomware variants, TTPs, and the MITRE ATT&CK framework. 

·         Familiarity with secure communication platforms and operational security (OpSec) best practices. 

·         Ability to analyze threat actor language and behavior for psychological and strategic insights. 

Certifications (Preferred): 

·         GCTI – GIAC Cyber Threat Intelligence 

·         CTIA – Certified Threat Intelligence Analyst 

·         Certified Cyber CounterIntelligence Analyst 

·         OSINT Training and Certifications 

·         Negotiation or crisis management training (e.g., FBI Crisis Negotiation, Harvard PON) 

Key Attributes: 

·         Calm under pressure with excellent judgment in high-stakes situations. 

·         Strong written and verbal communication skills. 

·         High emotional intelligence and cultural awareness. 

·         Discretion, professionalism, and a strong ethical compass. 

IronGate Cybersecurity is at the forefront of defending companies from cyber threats. As a trusted leader in cybersecurity solutions, our Professional Services Team leverages cutting-edge technology and deep industry expertise to provide comprehensive security assessments, incident response, and digital forensic analysis. Join us in our mission to protect our clients from the ever-evolving landscape of cyber threats.