• Serve as the initial point of contact for inbound, time-sensitive cyber incidents, monitoring designated intake channels and responding within required timeframes. • Coordinate and facilitate rapid scoping calls with clients and internal stakeholders to support swift case activation. • Act as a client-facing communications lead during early-stage incidents, maintaining clear, calm, and professional engagement under pressure. • Collect, organize, and document pre-scoping and intake information required to support operational readiness and Statement of Work (SOW) drafting. • Create and manage secure internal communication channels (e.g., Slack or Telegram) for active incidents, ensuring accurate, real-time updates are maintained. • Track incident status, action items, and dependencies, proactively following up to keep cases moving forward. • Support post-scoping operational steps, including coordination of secure data exchange processes and internal handoffs once approvals are in place. • Maintain detailed and organized case notes, timelines, and communication records throughout the lifecycle of an incident. • Escalate risks, blockers, or urgent issues promptly to appropriate internal stakeholders. • Operate effectively in high-pressure, fast-moving situations, adapting quickly as new information becomes available.