Incident Response Consultant

The Role

The consultant supports investigations into cyber security incidents, taking ownership of specific workstreams. Duties include analysing logs, disk images, memory and network traffic to determine attacker actions and impact, while liaising with SOC, MDR and threat intelligence teams throughout the investigation lifecycle.

Skills & Experience

Candidates need practical experience in host, network and memory forensics across Windows, Linux, macOS and multi-cloud platforms, alongside knowledge of Microsoft security tooling and telemetry. Understanding of evidence handling, chain-of-custody practices and threat actor TTPs is essential.

Who It Suits

This suits an analyst with solid forensic and incident investigation experience who wants to work within a Microsoft-focused security environment, collaborating closely with SOC and threat intelligence teams while developing skills in AI-assisted investigation workflows.