TrustedSec

Security Operations

• Support live incident investigations for clients, including evidence collection, triage, and timeline development across on-premises, cloud, and hybrid environments
• Perform host-based forensic analysis on Windows, Linux, and macOS systems using EDR telemetry and enterprise collection tools
• Investigate identity and SaaS compromises using Microsoft 365, Entra ID, and Google Workspace audit and sign-in logs
• Analyze cloud control-plane and workload activity in AWS, Azure, and GCP
• Analyze log and network data to identify attacker activity and help scope incidents
• Perform initial malware triage using static and dynamic analysis in sandboxed environments
• Extract indicators of compromise and escalate samples requiring deeper reverse engineering
• Draft report sections and findings for senior review and communicate status clearly to clients
• Collaborate with clients to develop and implement strategic security plans
• Provide guidance on security best practices, policies, and procedures
• Assist with tabletop exercises and incident-response readiness engagements
• Contribute to internal playbooks, tooling, blogs, webinars, and other content
• Develop and deliver high-level security training programs for clients’ staff
• Advise on security tools and technologies
• Build and maintain client relationships and act as a trusted advisor
• Represent TrustedSec at conferences, seminars, and industry events
• Support the consulting practice through research, presentations, and public thought leadership

Explore Incident Response Security Consultant at TrustedSec. Review requirements and application details.

Open roles

Incident Response Security Consultant