Principal Consultant, Incident Response

The Role

This position leads client-facing incident response engagements from initial scoping through to resolution, conducting host-based forensic analysis across Windows, Linux, and macOS environments, examining log sources including firewalls and databases, and guiding organisations through containment and long-term remediation of security incidents.

Skills & Experience

Candidates require strong practical experience in incident response and digital forensics, including host-based analysis and Indicator of Compromise identification across major operating systems. Familiarity with firewall, web, and database log analysis is essential. Relevant industry certifications and experience managing complex client engagements are expected at this principal level.

Who It Suits

This role suits a seasoned incident response professional who is comfortable leading engagements independently, communicating clearly with senior stakeholders under pressure, and delivering expert guidance in high-stakes situations. Those who enjoy variety, client interaction, and working across a broad range of environments will find this position rewarding.