Incident Response Principal Consultant

Accountabilities: Lead complex incident response engagements, coordinating investigations and guiding teams through high-priority cybersecurity incidents.

Conduct intrusion investigations, including work performed under the direction of outside counsel, and determine the scope, impact, and nature of compromises.

Perform host and network-based forensic analysis across Windows, macOS, and Linux environments using a range of investigative and forensic tools.

Develop and apply advanced threat-hunting methodologies to identify malicious activity across large and complex datasets.

Analyze network traffic, protocols, and security telemetry using technologies such as Zeek/Bro and Suricata to identify indicators of compromise and attacker behavior.

Perform basic malware analysis and apply static and dynamic analysis techniques to understand malicious capabilities and behaviors.

Support cloud incident response activities across environments such as AWS, Azure, and Google Cloud.

Develop customized tactical and strategic remediation recommendations for organizations affected by targeted attacks.

Communicate technical findings, risks, recommendations, and investigation outcomes clearly to customer executives, technical stakeholders, regulators, and legal counsel.

Manage projects effectively in a matrixed consulting environment while coordinating internal teams and maintaining high-quality client delivery.

Use AI technologies to enhance investigation workflows, accelerate decision-making, streamline processes, and improve business outcomes.

Mentor colleagues, contribute to a positive team environment, and share expertise through thought leadership, technical content, presentations, and industry events.

Requirements:

Bachelor’s or master’s degree in Computer Science, Computer Engineering, Mathematics, Information Security, Cybersecurity, Information Assurance, Intelligence Studies, or a related field; equivalent relevant professional experience or training may also be considered.

Demonstrated experience in incident response, information security, digital forensics, network forensics, malware analysis, remediation, or related cybersecurity disciplines.

Experience leading teams and managing complex engagements in a consulting or matrixed environment.

Strong understanding of targeted attacks, including advanced persistent threats, organized cybercrime, and hacktivist activity.

Hands-on experience with computer forensic investigation tools and methodologies for determining the extent and scope of compromise.

Strong knowledge of network protocols, network analysis, and associated security logs, with experience using tools such as Zeek/Bro or Suricata.

Understanding of static and dynamic malware analysis and reverse-engineering concepts.

Knowledge of secure network architecture, network operations, and cybersecurity engineering principles.

Experience with cloud incident response methodologies in AWS, Azure, and/or Google Cloud environments.

Proven ability to independently complete technical tasks, manage projects, and make sound decisions in high-pressure environments.

Excellent written and verbal communication skills, with the ability to translate complex technical findings for both executive and technical audiences.

Demonstrated ability to communicate methodology, provide guidance, and coordinate effectively with internal and customer-facing teams.

Experience leveraging AI technologies to improve cybersecurity decision-making, workflows, efficiency, and outcomes.

Strong problem-solving skills, a growth mindset, and a commitment to continuously expanding technical and consulting capabilities.

Ability to contribute as an incident response thought leader and foster a collaborative, constructive team environment.

Ability to travel on short notice, up to approximately 30% of the time.

Willingness and ability to meet any applicable employment screening or testing requirements.

Benefits:

Base salary: $115,000–$160,000 per year for U.S. candidates, depending on experience, skills, certifications, job level, supervisory responsibilities, and location.

Eligibility for performance-based bonuses and equity awards .

Comprehensive health insurance and wellness benefits , including programs supporting physical and mental wellbeing.

401(k) benefits.

Competitive paid time off and holidays to support time for rest and recharge.

Paid parental and adoption leave .

Professional development opportunities available across career levels and roles.

Employee networks, community groups, and volunteer opportunities designed to strengthen professional and social connections.

Remote work environment with flexibility and autonomy.

Opportunity to work on high-impact cybersecurity investigations involving sophisticated threats and complex enterprise environments.

Opportunities to contribute to industry thought leadership through technical publications, presentations, and security events.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1