Lead Consultant | Incident Response (DFIR)

The Role

This position leads active incident response engagements and supports IR retainer clients, conducting host-based and network forensic investigations across Windows, Mac, and Linux environments. Responsibilities include threat hunting, EDR-driven assessments, full packet analysis, report writing, and advising customers on strengthening their defensive security posture.

Skills & Experience

Candidates require strong blue team operations knowledge, experience with EDR tooling, and proficiency in host and network-based forensics. The ability to analyse full packet data, perform threat hunting, and communicate technical findings clearly to both technical and non-technical audiences is essential.

Who It Suits

This role suits an experienced incident responder who works well independently and within a collaborative team, thrives in fast-paced environments, and brings a humble, proactive attitude. Those who enjoy contributing to thought leadership through writing or knowledge-sharing sessions will find this role particularly rewarding.