Senior Incident Response Consultant
Pondurance
McLean, VA
The Role
This position involves leading end-to-end incident response investigations, triaging high-stakes security events, and conducting forensic analysis across host, network, and application environments. The consultant develops custom scripts and methodologies, produces reports for technical and executive audiences, and provides clients with immediate remediation advice during active incidents.
Skills & Experience
Candidates need 4+ years in forensic and incident response roles, with hands-on expertise in Windows and Unix environments, memory and disk forensics, and network traffic analysis. Experience with EDR platforms such as CrowdStrike and SentinelOne, forensic suites including FTK, EnCase, and AXIOM, plus certifications such as GCIH, GCFA, or GREM are preferred.
Who It Suits
This role suits an experienced DFIR professional comfortable working in high-pressure client-facing consulting environments, capable of communicating complex technical findings to both executive leadership and legal counsel, and confident leading ransomware and intrusion investigations with minimal oversight.
Typical advertised salary for Incident Response roles in United States: $125,000–$180,000 (median $150,000 — from 154 recent listings analysed by Forensic Focus).
Compare Incident Response salaries in United States →
Certifications mentioned: GCFA · GREM · GCIH — find training for these on the DFIR Training Finder.
