Principal Incident Response Security Consultant, Mandiant, Google Cloud

The Role

This senior consulting role centres on leading end-to-end incident response engagements for clients facing complex, high-profile breaches. Day-to-day work includes host and network forensics, cloud evidence analysis, log review, malware triage, threat hunting, and producing detailed technical and executive-level reports, with up to 20% travel.

Skills & Experience

Candidates need at least eight years across incident response, network forensics, cloud forensics, and disk and memory analysis. Cloud platform certifications are preferred, as is familiarity with CTF competitions and testing platforms such as Hack the Box. Strong client communication and project management skills are essential.

Who It Suits

This role suits a seasoned DFIR professional ready to operate at principal level within a globally recognised threat intelligence and incident response practice. Those comfortable navigating technically demanding investigations while advising executive stakeholders and legal counsel will thrive here.