Incident Response Security Consultant

TrustedSec

. Support live incident investigations for clients, including evidence collection, triage, and timeline development across on-premises, cloud, and hybrid environments .

Posted 11/6/2026full-timeRemote • United StatesJuniorMid-Level💰 $100,000 - $140,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Incident Response, including forensic analysis across various operating systems and cloud environments. Proficient in analyzing log data, malware triage, and developing strategic security plans while maintaining strong communication and client relationship skills.

Highest-signal resume keywords

Incident Response Best PracticesWindows Incident ResponseLog And Network Traffic AnalysisMalware Analysis And Reverse EngineeringScripting Or Automation Using Python

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Forensic AnalysisMalware TriageMemory ForensicsThreat HuntingCloud Control-Plane AnalysisEDR TelemetryIndicators Of Compromise ExtractionStatic And Dynamic AnalysisIdentity And SaaS Compromise InvestigationIncident Response Methodologies

Soft Skills

Analytical SkillsProblem-Solving SkillsWritten CommunicationVerbal CommunicationCollaboration

Tools & Technologies

Microsoft 365Entra IDGoogle WorkspaceAWSAzureGCPEnterprise Collection ToolsSandboxed Environments

Industry Keywords

CybersecurityComputer ForensicsIncident Response Tabletop ExercisesCompliance RequirementsSecurity Best Practices

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformLinuxMacOSPythonUnix

About the role

Key responsibilities & impact

Support live incident investigations for clients, including evidence collection, triage, and timeline development across on-premises, cloud, and hybrid environments
Perform host-based forensic analysis on Windows, Linux, and macOS systems using EDR telemetry and enterprise collection tools
Investigate identity and SaaS compromises using Microsoft 365, Entra ID, and Google Workspace audit and sign-in logs
Analyze cloud control-plane and workload activity in AWS, Azure, and GCP
Analyze log and network data to identify attacker activity and help scope incidents
Perform initial malware triage using static and dynamic analysis in sandboxed environments
Extract indicators of compromise and escalate samples requiring deeper reverse engineering
Draft report sections and findings for senior review and communicate status clearly to clients
Collaborate with clients to develop and implement strategic security plans
Provide guidance on security best practices, policies, and procedures
Assist with tabletop exercises and incident-response readiness engagements
Contribute to internal playbooks, tooling, blogs, webinars, and other content
Develop and deliver high-level security training programs for clients’ staff
Advise on security tools and technologies
Build and maintain client relationships and act as a trusted advisor
Represent TrustedSec at conferences, seminars, and industry events
Support the consulting practice through research, presentations, and public thought leadership

Requirements

What you’ll need

Current, legal authorization to work in the United States
Must reside in the United States; applicants located outside the United States are not considered
2–4 years of professional experience in Incident Response, security consulting, or related education
Bachelor’s degree in cybersecurity, computer science, or a related field, or equivalent practical experience
Demonstrated hands-on experience with Incident Response best practices, methodologies, and procedures
Hands-on Windows Incident Response and computer forensics experience
Strong knowledge of log and network traffic analysis
Excellent analytical, problem-solving, and investigative skills
Strong written and verbal communication abilities
Ability to work independently while collaborating effectively with a distributed team
High level of professionalism when handling sensitive and confidential information
Familiarity with industry frameworks, standards, and compliance requirements
Experience in Linux/UNIX, macOS, cloud, or mobile forensics is strongly preferred
Experience with malware analysis and reverse engineering is strongly preferred
Experience with memory forensics and volatile data analysis is strongly preferred
Experience with threat hunting in enterprise environments is strongly preferred
Experience with threat intelligence analysis and operational use is strongly preferred
Experience running or facilitating Incident Response tabletop exercises is strongly preferred
Scripting or automation experience using Python, PowerShell, or similar languages is strongly preferred
Relevant certifications are beneficial but not required
Must be able to lift 15 pounds at times
Must travel approximately 25% over the course of the calendar year

Benefits

Comp & perks

Generous paid time off allowance
Paid holidays
Performance pay bonus program
Continuous learning and professional development opportunities
Industry recognition opportunities
Occasional travel to client sites or industry-related events