Senior Incident Response Consultant | USA, Remote | $120,000 – $155,000
Maestro Search
United States
The Role
This position leads complex digital forensic investigations from initial triage through containment and recovery, covering host, network, cloud, and application environments. Consultants direct client teams during live incidents, scope engagements, develop detection logic from attacker behaviour, and deliver findings suitable for boards, legal counsel, insurers, and regulators.
Skills & Experience
Candidates need five or more years in incident response, preferably in a consultancy setting, with at least two GIAC certifications such as GCIH or GREM. Technical coverage spans disk and memory forensics, Active Directory, Microsoft 365, Azure, VMware, EDR platforms including CrowdStrike and SentinelOne, forensic suites such as FTK and AXIOM, and scripting in PowerShell and Python.
Who It Suits
This role suits an experienced incident responder who thrives on high-stakes, technically demanding casework across multiple jurisdictions and industries. Someone who takes genuine ownership of investigations end to end, communicates clearly with senior stakeholders under pressure, and wants to work within an established, well-regarded DFIR practice will find this a strong fit.
Typical advertised salary for Incident Response roles in United States: $125,000–$179,000 (median $149,000 — from 108 recent listings analysed by Forensic Focus).
Compare Incident Response salaries in United States →
Certifications mentioned: GREM · GCIH — find training for these on the DFIR Training Finder.
