Principal Security Consultant

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Lead comprehensive incident response engagements pertaining to ransomware, BEC, and ClickFix attacks.

• Take charge of forensic investigations within Windows environments, Active Directory, Microsoft 365, Azure, and endpoint platforms.

• Steer the creation of both executive-level and technical reports that detail root causes, attacker activities, and the impact on business operations.

• Provide guidance to clients on strategies for containment, recovery planning, and enhancing security measures during active incidents.

• Mentor and coach consultants and analysts, elevating the technical capabilities of the DFIR team.

• Develop and refine forensic tools, playbooks, investigation timelines, and methodologies aligned with MITRE ATT&CK.

• Collaborate with pre-sales and business development teams to aid in scoping discussions and crafting client proposals.

⛳️ Requirements

• Demonstrated capability to lead intricate DFIR investigations and manage client-facing incident response engagements.

• Profound understanding of the lifecycles of ransomware intrusions and adversarial tactics.

• Extensive expertise in Microsoft 365 and BEC investigations, including audit log analysis and scenarios involving identity compromises.

• Advanced proficiency in Windows host forensics, evidence collection, event log analysis, and memory analysis techniques.

• Experience in presenting technical findings and recommendations to senior stakeholders.

• Excellent communication, judgment, and decision-making abilities under pressure.

• Degree-level qualification in a relevant field or equivalent practical experience.

• Experience in supporting insurer-led or legally privileged investigations.

• Background within an NCSC CIR Enhanced organization.

• Familiarity with investigations related to Google Workspace.

• Industry certifications such as GCFA, GCFE, GCIH, GNFA, GREM, CREST CCIM, or CRIA.

🏝️ Benefits

• Private health insurance.

• Generous holiday allowance, including a day off on your birthday.

• Flexible working arrangements.

• Enhanced pension contributions.

• Regular social events across all our offices.