Incident Response Security Consultant

About the role

As an Incident Response Security Consultant you will deliver industry‑leading incident response, threat hunting, and forensic services to high‑profile clients. You will help organizations detect, contain, and remediate security incidents while providing strategic guidance to reduce business risk.

Key responsibilities

• Lead large, client‑facing incident response engagements and analyze cloud, endpoint, and network evidence.
• Identify and codify attacker TTPs and IOCs for current and future investigations.
• Develop scripts, tools, or methodologies to improve investigation processes.
• Produce and present comprehensive reports, trainings, and briefings for technical and executive audiences.
• Conduct host forensics, network forensics, log analysis, and malware triage.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field, or equivalent experience.
• Minimum 3 years of investigative experience in network, cloud, disk, or memory forensics.
• At least 3 years of end‑to‑end incident response experience.
• Ability to travel up to 30% of the time.
• Strong communication skills for interacting with technical staff, executives, legal counsel, and clients.
• Effective time‑management and mentorship abilities.

Required skills

• Network forensics
• Malware analysis and triage
• Cloud forensics
• Disk and memory forensics
• Incident response lifecycle
• Threat hunting
• Log analysis
• Scripting (e.g., Python)
• Certifications: GCFA, GCFE, GNFA, GCIA, GREM, GCIH, GX‑FA
• Experience with CTF platforms such as Hack the Box, TryHackMe, Overthewire