Incident Response Security Consultant, Mandiant

The Role

This consultant-level position involves leading complex, high-profile incident response engagements for enterprise clients. Day-to-day responsibilities include host and network forensics, cloud evidence examination, log analysis, malware triage, threat hunting, and the development of comprehensive reports and presentations for both technical and executive stakeholders.

Skills & Experience

Candidates need at least three years of investigative experience across network forensics, disk and memory forensics, cloud forensics, or malware triage, combined with three years of end-to-end IR experience. Preferred certifications include GCFA, GCFE, GNFA, GREM, GCIH, and GX-FA, alongside familiarity with cloud platforms and CTF environments.

Who It Suits

This role suits an experienced incident responder with strong forensic foundations who is comfortable advising clients under pressure, communicating findings to senior leadership, mentoring junior colleagues, and travelling up to 30% of the time across the region.