Summary
What you’ll impact
The Senior Incident Response Consultant will lead end‑to‑end forensic investigations, providing containment guidance and directing client teams during live incidents. They will work across host, network, cloud, and application environments to produce actionable findings for senior stakeholders.
Responsibilities
What you'll do
- Lead the forensic investigation end to end and stay with it through containment and recovery, directing the client's own teams on what needs to happen while the incident is still live.
- Lead host, network, cloud and application forensics on ransomware, business email compromise, nation-state and insider cases
- Give clients immediate, usable containment direction while the incident is still moving
- Turn attacker behaviour into durable detection logic and indicators the practice reuses across future casework
- Scope new engagements and run clients through the full response lifecycle from first call to final report
- Produce findings that stand up in front of boards, breach counsel, carriers and regulators
Requirements
What you’ll bring
- Three or more years in incident response, ideally consultancy-side
- 2 or more GIAC certifications, such as GCIH, GREM, GCNA or equivalent
- A proven track record of ownership & sesolution of complex, high-impact investigations.