Incident Response Security Consultant

About the role

As an Incident Response Security Consultant you will deliver industry‑leading incident response, assessment, and threat hunting services to help organisations detect, contain and remediate security incidents quickly and at scale.

Key responsibilities

• Lead large, client‑facing incident response engagements, analysing cloud, endpoint and network evidence.
• Identify and document attacker tools, tactics, techniques and procedures (TTPs) and indicators of compromise (IOCs) for current and future investigations.
• Develop scripts, tools and methodologies to improve Mandiant’s investigation processes.
• Perform forensic analysis, threat hunting and malware triage on compromised systems.
• Communicate findings and recommendations to technical teams, executive leadership and legal counsel.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or equivalent practical experience.
• Minimum three years of investigative experience in network, cloud, disk or memory forensics.
• At least three years of end‑to‑end incident response, analysis or containment experience.
• Ability to travel up to 30 % of the time.
• Strong communication skills and ability to mentor junior consultants.

Required skills

• Network forensics
• Malware triage analysis
• Cloud forensics
• Disk and memory forensics
• Incident response investigations
• Threat hunting
• Scripting and tool development