Principal Consultant, Incident Response (Unit 42)

The Role

This position leads end-to-end incident response engagements for clients, managing scope, guiding forensic investigations, and overseeing containment and remediation. Day to day involves hands-on host-based analysis across Windows, Linux, and macOS environments, as well as reviewing firewall, web, and database logs to identify indicators of compromise.

Skills & Experience

Candidates should bring proven expertise in host-based digital forensics and incident response across major operating systems, alongside strong log analysis capabilities spanning network and application sources. Experience scoping and managing client-facing engagements is essential, and relevant industry certifications in forensics or incident response are advantageous.

Who It Suits

This role suits a senior incident response professional who is equally comfortable leading complex investigations and advising clients under pressure. Someone who thrives in a consultancy environment, enjoys working across varied industries, and is confident delivering clear, expert guidance to stakeholders at all levels will excel here.