Incident Response Principal Consultant

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Incident Response Principal Consultant based in United States. This is a senior cybersecurity consulting role focused on leading complex incident response engagements for organizations facing sophisticated cyber threats. You’ll investigate major security incidents, uncover attacker activity, and help customers understand and contain the impact of breaches. The role combines technical depth across host, network, cloud, and malware forensics with strong client leadership and communication. You’ll work alongside highly skilled security professionals while engaging directly with executive stakeholders, legal counsel, regulators, and technical teams. The position also offers opportunities to develop innovative threat-hunting techniques and apply AI technologies to improve investigation workflows and decision-making. As a senior practitioner, you’ll contribute to industry thought leadership while mentoring colleagues and helping shape effective response strategies. Lead complex incident response engagements, coordinating investigations and guiding teams through high-priority cybersecurity incidents. Conduct intrusion investigations, including work performed under the direction of outside counsel, and determine the scope, impact, and nature of compromises. Perform host and network-based forensic analysis across Windows, macOS, and Linux environments using a range of investigative and forensic tools. Develop and apply advanced threat-hunting methodologies to identify malicious activity across large and complex datasets. Analyze network traffic, protocols, and security telemetry using technologies such as Zeek/Bro and Suricata to identify indicators of compromise and attacker behavior. Perform basic malware analysis and apply static and dynamic analysis techniques to understand malicious capabilities and behaviors. Support cloud incident response activities across environments such as AWS, Azure, and Google Cloud. Develop customized tactical and strategic remediation recommendations for organizations affected by targeted attacks. Communicate technical findings, risks, recommendations, and investigation outcomes clearly to customer executives, technical stakeholders, regulators, and legal counsel. Manage projects effectively in a matrixed consulting environment while coordinating internal teams and maintaining high-quality client delivery. Use AI technologies to enhance investigation workflows, accelerate decision-making, streamline processes, and improve business outcomes. Mentor colleagues, contribute to a positive team environment, and share expertise through thought leadership, technical content, presentations, and industry events. Requirements: Bachelor’s or master’s degree in Computer Science, Computer Engineering, Mathematics, Information Security, Cybersecurity, Information Assurance, Intelligence Studies, or a related field; equivalent relevant professional experience or training may also be considered. Demonstrated experience in incident response, information security, digital forensics, network forensics, malware analysis, remediation, or related cybersecurity disciplines. Experience leading teams and managing complex engagements in a consulting or matrixed environment. Strong understanding of targeted attacks, including advanced persistent threats, organized cybercrime, and hacktivist activity. Hands-on experience with computer forensic investigation tools and methodologies for determining the extent and scope of compromise. Strong knowledge of network protocols, network analysis, and associated security logs, with experience using tools such as Zeek/Bro or Suricata. Understanding of static and dynamic malware analysis and reverse-engineering concepts. Knowledge of secure network architecture, network operations, and cybersecurity engineering principles. Experience with cloud incident response met