Lead Consultant – Incident Response

About the role

As a Lead Consultant in Incident Response you will spearhead blue‑team operations, guiding technical investigations and threat‑hunting activities for a portfolio of clients. You will work both independently and collaboratively in a fast‑paced environment, applying deep knowledge of endpoint and network security to protect organisations against advanced attacks.

Key responsibilities

• Lead active incident response engagements and manage retainer customers.
• Conduct threat‑hunting and proactive assessments using EDR tools and full‑packet network data.
• Perform host‑ and network‑based forensics on Windows, macOS and Linux systems.
• Produce detailed technical reports and briefings for technical and non‑technical audiences.
• Document processes and drive continuous service‑improvement initiatives.
• Collaborate with customers to strengthen defensive security posture and existing controls.
• Share expertise through internal sessions and public blog posts.

Required profile

• Minimum 6 years of experience in cyber security incident response or blue‑team roles.
• Strong analytical mindset with the ability to work independently after an onboarding period.
• Excellent communication skills and a collaborative, humble attitude.

Required skills

• Microsoft Windows operating system expertise
• macOS (OSX) and Linux system knowledge
• Analysis of system and network device logs
• Static and dynamic malware analysis
• Blue‑team operations and threat hunting
• EDR tools proficiency
• Enterprise systems technologies and infrastructure
• Understanding of current threats, vulnerabilities and attack trends