Lead Consultant - Incident Response

About the role

The Lead Consultant will head incident response and forensics engagements within a high‑impact cyber defence environment. You will combine deep technical expertise in digital forensics with strong stakeholder communication to guide clients through complex investigations.

Key responsibilities

• Serve as technical and coordination lead on active incident response engagements, communicating progress to clients.
• Execute threat‑hunting activities and perform host and network forensics across Windows, macOS, and Linux platforms.
• Lead the production of detailed reports and technical briefs, and perform quality‑assurance reviews of junior team members' work.
• Maintain and develop the client‑fostered DFIR lab and act as subject‑matter expert in at least two forensic verticals.

Required profile

• Excellent attention to detail, stakeholder management and English communication skills.
• GIAC certification in at least one discipline (e.g., GNFA, GCIH, GCFA) or equivalent.
• Prior experience performing digital forensics (mandatory) and malware analysis (desirable).
• Bachelor’s degree in Computer Science or Engineering is desirable but not mandatory.

Required skills

• Blue‑team operations and threat‑hunting.
• Deep knowledge of network protocols (TCP/IP) and analysis tools such as Zeek, Rita or Suricata.
• Forensic expertise on Windows, Linux, macOS and mobile platforms.
• Static and dynamic malware analysis.
• Familiarity with the ATT&CK framework and AI‑security processes.