Lead cyber incident response engagements from scoping through recovery across multi-system environments. Coordinate claims teams, breach counsel, forensic providers, policyholders, and other stakeholders; oversee investigations, manage timelines and scope creep, translate forensic findings for technical, legal, and executive audiences, and handle legally sensitive materials. The role also contributes to incident response methodologies, playbooks, and tooling.