FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Cyber Incident Response Consultant
Control Risks. Lead and assist host, network, web server and cloud-based investigations into complex cyber incidents, including ransomware attacks .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in investigating complex cyber incidents, including ransomware attacks, with a strong understanding of enterprise infrastructure and cloud environments. Proficient in developing investigative toolsets and automation while effectively communicating technical concepts to clients.
Highest-signal resume keywords
Incident Response ExperienceCloud Environments KnowledgeDigital Forensics SkillsScripting And Development ExperienceMITRE ATT&CK Understanding
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Cyber Incident InvestigationLog AnalysisDigital ForensicsScriptingDevelopmentThreat HuntingMalware DetectionEDR ToolingSIGMA Rule GenerationYARA Signature Creation
Soft Skills
Analytical SkillsPresentation SkillsInvestigative MindsetIndependent Research SkillsClient Communication
Tools & Technologies
Microsoft AzureAWSGoogle CloudEDR ToolsAutomation ToolingCI/CD PipelinesSource Control SystemsAPIs
Industry Keywords
CybersecurityRansomwareSaaS PlatformsIncident Response TeamThreat IntelligenceTTPsCyber Response Methodologies
Tech Stack
Tools & technologiesAWSAzureCloud
About the role
Key responsibilities & impact- Lead and assist host, network, web server and cloud-based investigations into complex cyber incidents, including ransomware attacks
- Investigate incidents affecting SaaS platforms and software development environments, including source code repositories and CI/CD pipelines
- Conduct threat hunting and identify attacker activity using EDR and agent-led forensic tooling
- Perform live compromise assessments for organisations experiencing suspected ongoing intrusion
- Detect and hunt unknown, dormant and custom malware in memory across enterprise systems
- Design and develop investigative toolsets and automation, and assist with commercialising the technology
- Identify emerging threat actors and rapidly changing attacker tools, tactics and procedures
- Collaborate with the Cyber Threat Intelligence team to leverage technical information and threat intelligence through tooling and automation
- Advise on safe technical recovery of clients’ IT systems
- Ensure customer-friendly deployment and use of tooling and automation and handle customer queries
- Provide situation reports and case-related materials to clients, case leads and team leadership
- Prepare documentation for consultant review and contribute to structured, defensible client reports
- Contribute to cyber response methodologies and approaches
- Participate in the team’s on-call duty rota
- Identify potential growth and business opportunities
Requirements
What you’ll need- Proven experience investigating complex cyber incidents, including ransomware attacks, as part of an incident response team
- Technical degree or demonstrated knowledge of common networks, software and hardware used in business environments
- Strong understanding of enterprise infrastructure, web servers and cloud environments, including Microsoft Azure / Entra ID, AWS and Google Cloud
- Experience conducting log analysis and digital forensics following a cyber incident
- Proven experience responding to cyber-attacks
- Fluent in English, written and spoken
- Excellent presentation skills
- Excellent analytical skills
- Scripting and/or development experience
- Investigative mindset, independent research skills and interest in developing investigative toolsets and automation
- Strong understanding of MITRE ATT&CK techniques and sub-techniques
- Ability to explain TTPs to clients in non-technical terms
- Experience generating SIGMA, SNORT and YARA rules/signatures
- General understanding of SaaS platforms and software development practices, including source control, CI/CD pipelines and APIs
Benefits
Comp & perks- Competitively positioned compensation and benefits package
- Discretionary global bonus scheme based on company and individual performance
- Hybrid working arrangements supporting flexible and remote working
- Reasonable adjustments for participation in the interview process