Principal Consultant, Incident Response – Weekend Schedule

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Oversee and direct incident response operations, encompassing project scoping, guiding clients through forensic investigations, and managing security incident containment.

• Conduct reactive incident response and perform host-based analysis on Windows, Linux, and Mac OS X platforms to identify Indicators of Compromise (IOCs).

• Analyze firewall, web, database, and other log sources to uncover evidence of malicious activities and attack vectors.

• Investigate data breaches utilizing forensic tools such as EnCase, FTK, X-Ways, SIFT, and Splunk to ascertain the source and extent of compromises.

• Offer clients clear, actionable recommendations to enhance long-term remediation efforts and improve security posture.

• Collaborate with internal teams and external partners to ensure alignment and provide comprehensive solutions.

• Serve as a mentor to junior team members, imparting knowledge in incident response and best practices in digital forensics.

⛳️ Requirements

• A Bachelor’s degree with 8 years of experience, or a Master’s degree with 6 years of experience, or a PhD with 3 years of experience in Information Security, Computer Science, Digital Forensics, or a related discipline.

• Hands-on experience in incident response or digital forensics consulting.

• Expertise in host-based forensics and methodologies for responding to data breaches.

• Practical experience with forensic tools including EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, or WireShark.

• Willingness to travel as necessary to meet business requirements, averaging up to 20%.

🏝️ Benefits

• Reasonable accommodations for all qualified individuals with a disability.

• Equal opportunity employer.