Incident Response Security Consultant

Description

TrustedSec is looking for an Incident Response Consultant to join our IR team. This role is a great fit for someone with a degree in computer science, cybersecurity, digital forensics, or a few years of hands-on incident response or forensics experience who’s ready to work real client incidents alongside senior consultants, sharpen their skills, and grow into an independent responder.

Incident Response Consultants work directly with clients to investigate security incidents, perform host and network forensics, analyze malware, and guide organizations through detection, containment, eradication, and recovery. This role requires deep hands-on experience across Windows environments and enterprise networks, along with strong communication skills and sound judgment under pressure.

We’re hiring for both entry-level and mid-level positions. All candidates should have some hands-on investigation experience, whether in IR, DFIR, or a SOC. Entry-level candidates should be ready to support investigations under the guidance of senior consultants, while mid-level candidates should be able to own investigative work streams with less oversight. We’ll match the role to your experience.

Why Join Us?

• Work within a high impact Incident Response practice protecting organizations from advanced threats
• Collaborate with highly skilled, mission driven security professionals
• Gain opportunities for continuous learning, professional development, and industry recognition
• Contribute to a consulting practice known for technical excellence and thought leadership

Requirements

This role requires current, legal authorization to work in the United States. We cannot provide sponsorship or consider applicants located outside the United States.

This position is a remote position, allowing employees to work remotely from their home residence within the United States. There is occasional travel required to client sites or industry related events. If you reside in Ohio near our office headquarters, you are always welcome to work a hybrid schedule of your choosing.

Duties/Responsibilities:

An Incident Response Consultant at TrustedSec supports live incident investigations for clients. Consultants work directly with client teams to analyze and contain incidents, then help them strengthen their security programs so the next one is less likely or less damaging. Beyond casework, consultants help shape TrustedSec’s consulting practice by publishing research, presenting at conferences, and building a public reputation in the field.

Security Assessment and Analysis:

• Support live incident investigations under the guidance of senior consultants, including evidence collection, triage, and timeline development across on-premises, cloud, and hybrid environments
• Perform host-based forensic analysis on Windows, Linux, and macOS systems, using EDR telemetry and enterprise collection tools
• Investigate identity and SaaS compromises by reviewing Microsoft 365, Entra ID, and Google Workspace audit and sign-in logs
• Analyze cloud control plane and workload activity in AWS, Azure, and GCP, including CloudTrail, Azure Activity Logs, and GCP Cloud Audit Logs
• Analyze log and network data to identify attacker activity and help scope incidents
• Perform initial malware triage using static and dynamic analysis in sandboxed environments, extract indicators of compromise, and escalate samples that need deeper reverse engineering
• Draft report sections and findings for senior review, and communicate status to clients clearly

Security Planning and Strategy:

• Collaborate with clients to develop and implement strategic security plans tailored to their unique needs and risks
• Provide expert guidance on security best practices, policies, and procedures to enhance the overall security posture of the organization

Security Training and Awareness:

• Assist with tabletop exercises and IR readiness engagements
• Contribute to internal playbooks, tooling, and occasional blog or webinar content
• Develop and deliver high-level training programs to educate clients' staff on security protocols, emergency response, and risk mitigation strategies
• Raise awareness of security threats and vulnerabilities to ensure proactive measures are taken to prevent security breaches

Technical Expertise:

• Stay up to date with the latest security trends, threats, and technologies to provide informed recommendations to clients
• Advise on the selection and deployment of appropriate security tools and technologies to enhance the clients' security infrastructure

Client Communication and Relationship Management:

• Build and maintain strong client relationships by effectively communicating security findings, recommendations, and solutions in a clear and professional manner
• Act as a trusted advisor, providing ongoing guidance and support to clients to help them navigate evolving security challenges

Industry Representation:

• Represent the organization at industry conferences, seminars, and events, showcasing expertise and contributing to panels, discussions, and knowledge sharing
• Contribute to brand recognition and awareness by producing relevant content to be published through blogs, webinars, social media posts, or white papers

Required Skills/Abilities:

Candidates must meet all of the following requirements:

• Demonstrated hands on experience with Incident Response best practices, methodologies, and procedures
• Hands on Windows Incident Response and computer forensics experience
• Strong knowledge of log and network traffic analysis
• Excellent analytical, problem solving, and investigative skills
• Strong written and verbal communication abilities
• Ability to work independently while collaborating effectively with a distributed team
• High level of professionalism when handling sensitive and confidential information

Experience in one or more of the following areas is strongly preferred:

• Linux/UNIX, macOS, cloud, or mobile forensics
• Malware analysis and reverse engineering
• Memory forensics and volatile data analysis
• Threat hunting in enterprise environments
• Threat intelligence analysis and operational use
• Running or facilitating Incident Response tabletop exercises
• Scripting or automation experience using Python, PowerShell, or similar languages

Education and Experience:

• 2-4 years of professional experience in Incident Response, security consulting, or related education
• Bachelor’s degree in cybersecurity, computer science, or a related field, or equivalent practical experience
• Familiarity with industry frameworks, standards, and compliance requirements

Relevant certifications are beneficial but not required. Demonstrated real world experience carries significant weight.

Physical Requirements:

• Prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift 15 pounds at times.
• Travel approximately 25% over the course of the calendar year.
• Must reside in the United States.

Salary Description:

Base compensation typically ranges from $100,000 - $140,000 and is determined by multiple factors such as geographic location, relevant experience, and demonstrated skills. In addition to base pay, we offer a generous paid time off allowance, paid holidays and a performance pay bonus program.

Learn More about TrustedSec here!