Senior Incident Response Consultant, Mandiant, Google Cloud

Forensic Focus Limited; New York, Northern (NY, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Forensic Focus Limited seeks a senior incident response consultant to lead end-to-end engagements for complex breaches. The role covers host/network forensics, log analysis, malware triage, threat hunting, and crisis management, with formal reporting to technical teams and executive leadership.

You will work in a fast-paced consulting environment, engaging stakeholders at all levels and traveling up to 30% as needed. Strong Linux forensics background and cloud certifications are highly valued.

Qualifications

• 5+ years of hands-on incident response experience across Linux and other OSes.
• Experience analyzing networks, logs, disks and memory forensics, malware triage.
• Cloud certifications preferred; experience with cyber threat investigations in consulting environments.

Responsibilities

• Lead end-to-end incident response engagements for high-profile breaches.
• Perform host and network forensics, log analysis, and malware triage.
• Conduct threat hunting, crisis management, and develop detailed client reports for technical teams and executives.

Skills

Incident response

Network forensics

Log analysis

Disk forensics

Memory forensics

Malware triage

Job description

### The RoleThis senior consulting role centres on leading end-to-end incident response engagements for clients facing complex, high-profile breaches. Day-to-day work includes host and network forensics, log analysis, malware triage, threat hunting, and crisis management, alongside developing detailed reports for both technical teams and executive leadership.### Skills & ExperienceCandidates need at least five years of hands-on incident response experience, including network and log forensic analysis, disk and memory forensics, and malware triage across one or more operating systems such as Linux. Cloud platform certifications are preferred, as is experience with CTF competitions or platforms like Hack the Box.### Who It SuitsThis role suits an experienced DFIR professional who thrives in fast-paced, client-facing consulting environments and is comfortable engaging with stakeholders at all levels. Those with a passion for advanced threat investigation, nation-state-level adversaries, and up to 30% travel will find it particularly rewarding.