Incident Response Security Consultant

Description

Trusted Sec is looking for an Incident Response Consultant to join our IR team. This role is a great fit for someone with a degree in computer science, cybersecurity, digital forensics, or a few years of hands-on incident response or forensics experience who’s ready to work real client incidents alongside senior consultants, sharpen their skills, and grow into an independent responder.

Incident Response Consultants work directly with clients to investigate security incidents, perform host and network forensics, analyze malware, and guide organizations through detection, containment, eradication, and recovery. This role requires deep hands-on experience across Windows environments and enterprise networks, along with strong communication skills and sound judgment under pressure.

We’re hiring for both entry-level and mid-level positions. All candidates should have some hands-on investigation experience, whether in IR, DFIR, or a SOC. Entry-level candidates should be ready to support investigations under the guidance of senior consultants, while mid-level candidates should be able to own investigative work streams with less oversight. We’ll match the role to your experience.

Why Join Us?

• Work within a high impact Incident Response practice protecting organizations from advanced threats
• Collaborate with highly skilled, mission driven security professionals
• Gain opportunities for continuous learning, professional development, and industry recognition
• Contribute to a consulting practice known for technical excellence and thought leadership

Requirements

This role requires current, legal authorization to work in the United States. We cannot provide sponsorship or consider applicants located outside the United States.

This position is a remote position, allowing employees to work remotely from their home residence within the United States. There is occasional travel required to client sites or industry related events. If you reside in Ohio near our office headquarters, you are always welcome to work a hybrid schedule of your choosing.

An Incident Response Consultant at Trusted Sec supports live incident investigations for clients. Consultants work directly with client teams to analyze and contain incidents, then help them strengthen their security programs so the next one is less likely or less damaging. Beyond casework, consultants help shape Trusted Sec’s consulting practice by publishing research, presenting at conferences, and building a public reputation in the field.

Security Assessment and Analysis:

• Support live incident investigations under the guidance of senior consultants, including evidence collection, triage, and timeline development across on-premises, cloud, and hybrid environments
• Perform host-based forensic analysis on Windows, Linux, and macOS systems, using EDR telemetry and enterprise collection tools
• Investigate identity and SaaS compromises by reviewing Microsoft 365, Entra , and Google Workspace audit and sign-in logs
• Analyze cloud control plane and workload activity in AWS, Azure, and GCP, including Cloud Trail, Azure Activity Logs, and GCP Cloud Audit Logs
• Analyze log and network data to identify attacker activity and help scope incidents
• Perform initial malware triage using static and dynamic analysis in sandboxed environments, extract indicators of compromise, and elevate samples that need deeper reverse engineering
• Draft report sections and findings for senior review, and communicate status to clients clearly

Security Planning and Strategy:

• Collaborate with clients to develop and implement strategic security plans tailored to their unique needs and risks
• Provide expert guidance on security best practices, policies, and procedures to enhance the…