Senior Incident Response Consultant

About the role

As a Senior Incident Response Consultant you will lead technical investigations within a high‑impact cyber defence environment. You will work closely with a skilled blue‑team, handling complex digital forensics and incident response engagements while maintaining a proactive, collaborative attitude.

Key responsibilities

• Serve as technical lead on active incident response engagements.
• Communicate investigation progress and findings to clients and stakeholders in clear English.
• Execute threat‑hunting activities supporting SOC and incident response work.
• Perform host and network forensics across Windows, macOS and Linux platforms.
• Produce detailed reports, technical briefs and remediation recommendations.
• Contribute to process documentation and continuous service‑improvement initiatives.
• Maintain and enhance the DFIR forensics lab.
• Act as subject‑matter expert in at least one vertical such as malware analysis, cloud forensics or OT/ICS response.

Required profile

• Strong understanding of blue‑team operations, incident response management and digital forensics techniques.
• Solid knowledge of network protocols (TCP/IP) and analysis tools like Zeek, Rita or Suricata.
• Experience with Windows, Linux and macOS forensic investigations.
• Familiarity with static and dynamic malware analysis and mobile device forensics.
• Knowledge of the ATT&CK framework, current threat trends and AI‑assisted security processes.
• Excellent organisational, prioritisation and independent‑working abilities.
• GIAC certification (e.g., GCIH, GCFA) or equivalent and proven digital forensics experience.

Required skills

• Blue‑team operations
• Digital forensics
• Incident response
• Threat hunting
• Malware analysis