Incident Response Consultant (North America)

The Role

This role centres on investigating cyber security incidents across diverse environments, owning defined investigative workstreams with appropriate guidance. Day-to-day responsibilities include host, network, and memory forensics; log and artefact analysis; threat actor TTP identification; evidence handling; and coordinating with SOC, MDR, and Threat Intelligence teams to drive effective incident resolution.

Skills & Experience

Candidates should have practical experience in digital forensics and incident response across Windows, Linux, macOS, and multi-cloud platforms. Familiarity with Microsoft security technologies and telemetry is strongly preferred, given the organisation’s Microsoft-first approach. Experience with chain-of-custody standards, network traffic analysis, and emerging threat landscapes is expected.

Who It Suits

This position suits a mid-level IR or DFIR professional looking to grow within a structured, Microsoft-focused security environment. It is well suited to someone comfortable working across technical and stakeholder-facing responsibilities, and interested in the evolving role of agentic AI within incident response workflows.