Lead Incident Response Consultant

About the role

As a Lead Consultant in Incident Response, you will head technical and coordination efforts for high‑impact cyber defence engagements. You will work within a skilled blue‑team environment, handling both independent investigations and collaborative projects.

Key responsibilities

• Lead technical and coordination activities on active incident response engagements, communicating progress to clients.
• Execute threat‑hunting, host and network forensics across Windows, macOS, Linux and cloud platforms.
• Produce detailed investigation reports, perform quality‑assurance reviews, and deliver briefings to technical and non‑technical audiences.
• Maintain and develop the DFIR lab, drive internal research, and create process documentation for continuous improvement.

Required profile

• Strong English communication and stakeholder‑management skills.
• Ability to work independently after an initial onboarding period.
• GIAC certification in at least one discipline (e.g., GNFA, GCIH, GCFA) or equivalent.
• Previous hands‑on experience in digital forensics; malware analysis experience is a plus.

Required skills

• Host forensics, cloud forensics, network forensics, and mobile forensics.
• Static and dynamic malware analysis.
• Threat hunting and use of the ATT&CK framework.
• Proficiency with network analysis tools such as Bro/Zeek, Rita, or Suricata.
• Deep knowledge of Windows, Linux, macOS, and AI‑assisted security processes.