Solid understanding of the application, database, authentication, and network security principles; able to demonstrate how network services and protocols interact to provide communications, evidence recovery techniques, log data analytics, Incident categories, IR event handling methodologies, intrusion detection systems, network protocol, and packet analysis. Additionally, the Incident Commander will collaborate with Security Operations and Security Engineering practice leaders to evaluate the direction of our offerings, establish ongoing relationships with third parties and clients, and work closely with stakeholders to understand business objectives and advise on security risks/mitigation strategies during incident response work.