Incident Response Security Consultant

TrustedSec • Fairlawn, OH

3d • Remote

About The Position

TrustedSec is hiring an Incident Response Consultant to join its Incident Response team. The role is intended for entry-level or mid-level candidates with hands-on investigation experience in incident response, digital forensics, or a security operations center. Entry-level consultants support investigations under senior consultants’ guidance; mid-level consultants may own investigative work streams with less oversight. The role is remote from a home residence in the United States, with occasional travel to client sites or industry events. Employees residing near the Ohio headquarters may choose a hybrid schedule.

Consultants work directly with clients on live security incidents, performing host and network forensics, analyzing malware, and helping organizations detect, contain, eradicate, and recover from threats. They also advise clients on security planning, support readiness exercises and training, contribute to internal tools and playbooks, and represent TrustedSec through research, publications, and industry events. Base compensation typically ranges from $100,000 to $140,000, depending on factors such as location, experience, and skills.

Requirements

• Demonstrated hands-on experience with incident response best practices, methodologies, and procedures.
• Hands-on Windows incident response and computer forensics experience.
• Strong knowledge of log and network traffic analysis.
• Excellent analytical, problem-solving, and investigative skills.
• Strong written and verbal communication abilities.
• Ability to work independently and collaborate effectively with a distributed team.
• Professional handling of sensitive and confidential information.
• 2–4 years of professional experience in incident response, security consulting, or related education.
• Bachelor’s degree in cybersecurity, computer science, or a related field, or equivalent practical experience.
• Familiarity with industry frameworks, standards, and compliance requirements.
• Must have current legal authorization to work in the United States; sponsorship is unavailable, and applicants located outside the United States are not considered.
• Must reside in the United States.
• Able to sit at a desk and work on a computer for prolonged periods and lift 15 pounds at times.
• Travel approximately 25% over the course of the calendar year.

Nice To Haves

• Experience with Linux/UNIX, macOS, cloud, or mobile forensics.
• Malware analysis and reverse engineering experience.
• Memory forensics and volatile data analysis experience.
• Threat hunting in enterprise environments.
• Threat intelligence analysis and operational use.
• Experience running or facilitating incident response tabletop exercises.
• Scripting or automation experience using Python, PowerShell, or similar languages.
• Relevant certifications; these are beneficial but not required.

Responsibilities

• Support live incident investigations, including evidence collection, triage, and timeline development across on-premises, cloud, and hybrid environments.
• Perform host-based forensic analysis on Windows, Linux, and macOS systems using EDR telemetry and enterprise collection tools.
• Investigate identity and SaaS compromises by reviewing Microsoft 365, Entra ID, and Google Workspace audit and sign-in logs.
• Analyze cloud control plane and workload activity in AWS, Azure, and GCP using relevant audit logs.
• Analyze log and network data to identify attacker activity and help scope incidents.
• Perform initial malware triage using static and dynamic analysis in sandboxed environments, extract indicators of compromise, and escalate samples requiring deeper reverse engineering.
• Draft report sections and findings for senior review and communicate investigation status clearly to clients.
• Collaborate with clients to develop and implement security plans tailored to their needs and risks.
• Provide guidance on security best practices, policies, and procedures.
• Assist with tabletop exercises and incident response readiness engagements.
• Contribute to internal playbooks and tooling, and occasionally create blog or webinar content.
• Develop and deliver high-level client training on security protocols, emergency response, and risk mitigation.
• Stay current on security trends, threats, and technologies and advise clients on security tools and their deployment.
• Build and maintain client relationships by communicating findings, recommendations, and solutions professionally and clearly.
• Provide ongoing guidance to clients as a trusted advisor.
• Represent TrustedSec at conferences, seminars, and other industry events, including contributing to panels, discussions, and knowledge sharing.
• Create content for blogs, webinars, social media, or white papers to support brand recognition and awareness.

Benefits

• Generous paid time off allowance
• Paid holidays
• Performance pay bonus program
• Opportunities for continuous learning, professional development, and industry recognition

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level