Whenever there is an information security incident, there must be someone to address the issues that arise. This role is often part of other roles, but at larger organizations, some individuals may be devoted exclusively to incident response. It is common for this role to be done by consultants, as smaller organizations cannot afford to maintain the skills in house. Because of this, those entering this role can expect significant travel to organizations in need of your skills.
“Months of boredom punctuated by moments of terror.”
— New York Times