Senior Cyber Incident Response Consultant

Job summary

Lead complex cyber incident investigations, conduct advanced forensic and threat analysis, preserve evidence, and guide customers through containment and response. Advise technical teams and executives, assess and improve incident readiness, facilitate exercises, and mentor junior responders.

Job details

Senior Incident Response Consultant | Remote (Ontario, Canada) | www.TheTechRecruiter.ai are delighted to be partnering with an ambitious Managed Security Service Provider established in Scotland with operations across EMEA and North America. They are driven to help protect organisations against the rising threat of cyber-attacks in an ever-evolving digital world. The have become a known Microsoft Security Partner with NCSC status as well as several prestigious awards to their name. More importantly, they are a people focused organisation who recognise their success is all down to the employees who make it happen. This is their biggest achievement! Be the person organisations trust when everything’s on fire. When a serious cyber incident hits, you’ll lead the investigation, find the truth fast, guide the response, and help customers come out stronger. Role purpose As a Senior Cyber Incident Response Consultant, you’ll lead and deliver complex cyber security incident investigations and provide expert technical, strategic, and executive-level guidance. You’ll combine advanced digital forensics, threat analysis, and incident leadership with consulting, mentoring, and readiness activities that improve customer resilience and reduce harm. What you’ll do Incident investigation & analysis (hands-on, high-impact) Lead complex incident investigations across diverse technologies and environments. Participate in an on-call rota with out-of-hours response as required. Perform advanced forensics across Windows, Linux, macOS and multi-cloud environments (host, network, and memory). Analyse logs, network traffic, disk images, and volatile artefacts to establish attacker intent, actions, timeline, and impact. Identify adversary tools, tactics, and procedures (TTPs) and translate findings into clear next steps. Collect and preserve evidence to defensible standards, maintaining documentation and chain-of-custody. Stay current on emerging threats, malware families, and evolving threat actor behaviours. Work confidently with customer stakeholders including technical teams, legal, and executive leadership during incidents. Improve detection, escalation, containment, and response processes—internally and for customers. Collaborate with Threat Intelligence to enrich and operationalise investigative findings. Consulting, advisory & customer engagement (trusted voice) Communicate findings and recommendations clearly to both technical and non-technical audiences. Link technical findings to business risk, enabling better decision-making at leadership level. Support privacy/security risk mitigation activities with internal and external teams. Deliver IR Readiness Assessments of customer plans, playbooks, and response capability. Provide executive and board-level briefings and training on cyber security and incident response. Facilitate tabletop exercises that genuinely test and improve readiness. Mentoring & leadership Mentor junior IR team members through coaching, technical guidance, and quality assurance - raising the bar across the function. What you’ll bring Advanced forensic analysis across Windows, Linux, macOS, and cloud platforms. Memory forensics (static and dynamic). Strong network traffic and log analysis skills (firewall, endpoint, web, identity/authentication, cloud telemetry). Deep understanding of enterprise security controls: Active Directory, identity systems, and network architectures. Proficiency with EDR and SIEM platforms for investigations and threat hunting. Experience with Microsoft-aligned security stacks. Ability to extract IOCs, identify attacker behaviour patterns, and map findings to TTPs. Evidence handling to defensible standards, including chain-of-custody. Comfortable building scripts, playbooks, or tooling to automate/improve investigation workflows. Why join us? Work with a collaborative and forward-thinking cybersecurity team. Competitive salary of depending on experience of up to $200k Flexible working arrangements (remote) Medical Insurance Full Vision and Dental Cover Up to 6% pension contribution Employee Assistance Programme Remote working Opportunity Referral Programme Ready to apply? Send us your CV or reach out directly to learn more. Let’s help build a safer digital future together.

What you’ll do

Lead complex cyber incident investigations, conduct advanced forensic and threat analysis, preserve evidence, and guide customers through containment and response. Advise technical teams and executives, assess and improve incident readiness, facilitate exercises, and mentor junior responders.

Requirements

Candidates need advanced forensic experience across Windows, Linux, macOS, and cloud environments, including memory, network, and log analysis. They should understand enterprise security controls and Microsoft-aligned security tools, handle evidence defensibly, communicate with technical and executive stakeholders, and be able to improve investigative workflows through scripting or automation.

Benefits

• Flexible Working Arrangements
• Medical Insurance
• Vision Coverage
• Dental Coverage
• Pension Contribution Up To 6%
• Employee Assistance Programme
• Remote Working
• Referral Programme

Listed skills

• Windows · Preferred
• Linux · Preferred
• Active Directory · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Digital Forensics
• Incident Response
• Memory Forensics
• Network Traffic Analysis
• Log Analysis
• Threat Analysis
• Threat Hunting
• Windows
• Linux
• macOS
• Cloud Platforms
• Active Directory
• Endpoint Detection And Response (EDR)
• Security Information And Event Management (SIEM)
• Evidence Handling And Chain Of Custody
• Incident Response Readiness

Job areas

• Technology
• Security & Safety
• Consulting
• Management & Leadership