Incident Response Principal Consultant

This principal-level consulting role centres on leading high-priority incident response engagements for organisations facing sophisticated cyber threats. Day to day, the practitioner conducts intrusion investigations, performs host and network-based forensic analysis across Windows, macOS, and Linux, and supports cloud IR in AWS, Azure, and GCP environments. Tools and technologies include Zeek/Bro, Suricata, and standard forensic investigation platforms, with additional exposure to static and dynamic malware analysis. The role requires direct engagement with executive stakeholders, legal counsel, and regulators, as well as delivering tailored remediation recommendations. AI technologies are applied to streamline investigation workflows. Candidates should bring proven experience in IR or digital forensics, strong knowledge of network protocols, and the ability to lead teams within a matrixed consulting environment. Mentoring and thought leadership contributions are expected.