Principal Consultant, Incident Response (Unit 42)
Core
Lead and produce deliverables for reactive incident response engagements, guiding clients through forensic investigations and containment.
Role type
Principal Consultant, Incident Response
Builds
Reactive incident response services and forensic analysis deliverables for enterprise clients
Domain
Cybersecurity / Digital Forensics
Deliverable
client delivery
Required skills
Incident response leadership, Host-based forensics (Windows/Linux/macOS), Data breach investigation, Log analysis, Forensic tool proficiency (EnCase, FTK, X-Ways, SIFT, Splunk), Remediation strategy
Preferred skills
Complex technical engagement leadership, C-suite communication, Public speaking, Executive presence
Technologies
EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark
Responsibilities
Manage incident response engagements from scoping to containment; Perform host-based analysis to identify IOCs; Examine logs to identify malicious activity; Investigate data breaches using forensic tools; Provide actionable remediation recommendations; Mentor junior team members
Seniority
Principal, hands-on IC with mentorship
