Incident Response Security Consultant
About The Position
TrustedSec is hiring an Incident Response Consultant to join its Incident Response team. The role is suited to candidates with relevant education or hands-on incident response or forensics experience who want to investigate client incidents alongside senior consultants and develop toward independent response work. The company is hiring at both entry and mid-levels, matching the role to the candidate’s experience. Entry-level consultants support investigations under senior guidance, while mid-level consultants may own investigative workstreams with less oversight. Consultants work directly with clients to investigate security incidents, perform host and network forensics, analyze malware, and guide organizations through detection, containment, eradication, and recovery. The work spans Windows environments and enterprise networks, as well as on-premises, cloud, and hybrid environments. Consultants also help clients improve their security programs, contribute to internal practice development, and may publish research or represent the company at industry events. The position is remote from the employee’s home residence within the United States, with occasional travel to client sites or industry events. Employees residing near TrustedSec’s Ohio headquarters may choose a hybrid schedule. Candidates must have current legal authorization to work in the United States; sponsorship is unavailable, and applicants located outside the United States are not considered. Travel is approximately 25% over the calendar year.
Requirements
- Demonstrated hands-on experience with incident response best practices, methodologies, and procedures.
- Hands-on Windows incident response and computer forensics experience.
- Strong knowledge of log and network traffic analysis.
- Excellent analytical, problem-solving, and investigative skills.
- Strong written and verbal communication abilities.
- Ability to work independently and collaborate effectively with a distributed team.
- High level of professionalism when handling sensitive and confidential information.
- 2–4 years of professional experience in incident response, security consulting, or related education.
- Bachelor’s degree in cybersecurity, computer science, or a related field, or equivalent practical experience.
- Familiarity with industry frameworks, standards, and compliance requirements.
- Current legal authorization to work in the United States; applicants must reside in the United States.
- Prolonged periods of sitting at a desk and working on a computer; must be able to lift 15 pounds at times.
- Approximately 25% travel over the calendar year.
Nice To Haves
- Experience in Linux/UNIX, macOS, cloud, or mobile forensics.
- Experience in malware analysis and reverse engineering.
- Experience in memory forensics and volatile data analysis.
- Experience in threat hunting in enterprise environments.
- Experience in threat intelligence analysis and operational use.
- Experience running or facilitating incident response tabletop exercises.
- Scripting or automation experience using Python, PowerShell, or similar languages.
- Relevant certifications; beneficial but not required.
Responsibilities
- Support live incident investigations, including evidence collection, triage, and timeline development across on-premises, cloud, and hybrid environments.
- Perform host-based forensic analysis on Windows, Linux, and macOS systems using EDR telemetry and enterprise collection tools.
- Investigate identity and SaaS compromises by reviewing Microsoft 365, Entra ID, and Google Workspace audit and sign-in logs.
- Analyze cloud control-plane and workload activity in AWS, Azure, and GCP, including relevant audit and activity logs.
- Analyze log and network data to identify attacker activity and help scope incidents.
- Perform initial malware triage using static and dynamic analysis in sandboxed environments, extract indicators of compromise, and escalate samples requiring deeper reverse engineering.
- Draft report sections and findings for senior review and communicate status clearly to clients.
- Collaborate with clients to develop and implement strategic security plans tailored to their needs and risks.
- Provide guidance on security best practices, policies, and procedures to improve clients’ security posture.
- Assist with tabletop exercises and incident-response readiness engagements.
- Contribute to internal playbooks, tooling, and occasional blog or webinar content.
- Develop and deliver high-level client training on security protocols, emergency response, and risk mitigation; raise awareness of threats and vulnerabilities.
- Stay current with security trends, threats, and technologies and provide informed recommendations.
- Advise clients on selecting and deploying security tools and technologies.
- Build and maintain client relationships, clearly communicate findings and recommendations, and provide ongoing guidance as a trusted advisor.
- Represent TrustedSec at industry conferences, seminars, and events, and contribute to panels, discussions, and knowledge sharing.
- Contribute content such as blogs, webinars, social media posts, or white papers to support brand recognition and awareness.
Benefits
- Generous paid time off allowance.
- Paid holidays.
- Performance pay bonus program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
