Incident Response Security Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in live incident investigations for clients, encompassing evidence collection, triage, and timeline creation across on-premises, cloud, and hybrid environments.

• Conduct host-based forensic analysis on Windows, Linux, and macOS systems utilizing EDR telemetry and enterprise collection tools.

• Examine identity and SaaS compromises by analyzing Microsoft 365, Entra ID, and Google Workspace audit and sign-in logs.

• Evaluate cloud control-plane and workload activities in AWS, Azure, and GCP.

• Review log and network data to detect attacker activity and aid in incident scoping.

• Execute initial malware triage through static and dynamic analysis in isolated environments.

• Extract indicators of compromise and escalate samples that require in-depth reverse engineering.

• Prepare report sections and findings for senior review and effectively communicate status updates to clients.

• Work collaboratively with clients to formulate and execute strategic security plans.

• Offer guidance on security best practices, policies, and procedures.

• Support tabletop exercises and incident-response readiness initiatives.

• Contribute to internal playbooks, tooling, blogs, webinars, and other content.

• Develop and present high-level security training programs for clients’ personnel.

• Provide advice on security tools and technologies.

• Establish and nurture client relationships, acting as a trusted advisor.

• Represent TrustedSec at conferences, seminars, and industry events.

• Assist the consulting practice through research, presentations, and public thought leadership.

⛳️ Requirements

• Must have current, legal authorization to work in the United States.

• Candidates must reside in the United States; those located outside the U.S. will not be considered.

• 2–4 years of professional experience in Incident Response, security consulting, or a related educational background.

• Bachelor's degree in cybersecurity, computer science, or a related field, or equivalent practical experience.

• Proven hands-on experience with Incident Response best practices, methodologies, and procedures.

• Hands-on experience in Windows Incident Response and computer forensics.

• Strong understanding of log and network traffic analysis.

• Exceptional analytical, problem-solving, and investigative skills.

• Excellent written and verbal communication skills.

• Ability to work independently while effectively collaborating with a distributed team.

• High level of professionalism when managing sensitive and confidential information.

• Familiarity with industry frameworks, standards, and compliance requirements.

• Experience in Linux/UNIX, macOS, cloud, or mobile forensics is highly preferred.

• Strong preference for experience with malware analysis and reverse engineering.

• Strong preference for experience with memory forensics and volatile data analysis.

• Strong preference for experience with threat hunting in enterprise environments.

• Strong preference for experience with threat intelligence analysis and operational applications.

• Strong preference for experience conducting or facilitating Incident Response tabletop exercises.

• Strong preference for scripting or automation experience using Python, PowerShell, or similar languages.

• Relevant certifications are advantageous but not mandatory.

• Must be able to lift 15 pounds occasionally.

• Willingness to travel approximately 25% throughout the calendar year.

🏝️ Benefits

• Generous paid time off allowance.

• Paid holidays.

• Performance pay bonus program.

• Continuous learning and professional development opportunities.

• Opportunities for industry recognition.

• Occasional travel to client locations or industry-related events.