Principal Consultant: DFIR
Cyderes· Managed Services & Consulting – 105 - Security Operations
Remote$175k - $190kFull-timePosted 2w ago
About the role
The Principal Incident Response Consultant will respond to customer information security incidents as lead responder or incident handler, build and lead response teams, and serve as primary interface to customers in crisis. Requires strong communication, collaboration, and incident response expertise across multiple environments.
Responsibilities
- Act as a lead responder on high profile and sensitive customer engagements.
- Perform incident triage, determine scope, urgency, and potential impact, identify vulnerabilities, and recommend expeditious remediation.
- Be involved in the full incident response lifecycle from preparation through detection, management, resolution, and post-incident reporting and lessons learned.
- Collect, triage, and analyze forensic artifacts from client networks or devices in support of investigations.
- Utilize various EDRs or log collection platforms to conduct large-scale investigations and examine endpoint and network-based sources of evidence.
- Communicate with customers clearly throughout all phases of an incident, including verbal and written reports.
- Assist with developing, operating, and continuously improving Cyderes Incident Response services.
- Train, develop, coach, and supervise junior and ad-hoc responders.
Qualifications
- Minimum of 5 years of experience in professional services or information security with at least 3 years in Incident Response.
- Holds an industry-accepted certification validating digital forensics or incident response capabilities (GCIH, GCFA, GCFE, CFCE, GREM, EnCE, CCE, or similar).
- Experience communicating complex technical topics to both technical and non-technical audiences.
- Experience coordinating an incident and/or leading a team during an incident.
- Experience investigating Windows, Linux, MacOS, and cloud environments.
- Demonstrated experience in endpoint forensics, memory forensics, network forensics, and malware analysis with specialized knowledge in at least one field using tools such as Axiom, FTK, X-Ways, etc.
- Experience identifying indicators of compromise and threat actor activity using a hypothesis-driven approach.
- Applied knowledge of the Incident Response Lifecycle, Cyber Kill Chain, and MITRE ATT&CK Framework.
- Strong client-facing communication skills.
- Bachelor's degree in a relevant discipline.
- Experience with network and security technologies including Elasticsearch, data analytic platforms, endpoint tools, network technologies, and SIEMs.
- Proficiency with programming or scripting languages such as Python and PowerShell.
- Ability to preserve host-based and network evidence in a forensically sound manner.
- Experience with project management and ability to learn new technologies quickly.
- Effective collaboration with remote teams.
Skills
Required:incident responsedigital forensicscommunicationleadership / team coordinationCloud and OS environmentsforensic toolsscripting/programming
Benefits
- Medical Insurance - Employee + dependents
- Life Insurance
- Retirement Match Program
- Hybrid Work Model - 2–3 days in office
- Maternity & Paternity Leave
- Paid Time Off - PTO + sick & casual leave
- Bereavement & Volunteer Time
- Professional Development - Reimbursement program
- LinkedIn L&D Platform - Thousands of courses
- Mobile Phone Reimbursement
Last updated Oct 21, 2026. Interested? Apply on the company site.
About Cyderes
Get enterprise-grade cybersecurity. Be Everyday Ready.
Cyderes is a managed security services partner with an identity-first approach uniting MDR, exposure management, and IAM, keeping you Everyday Ready.
Managed Detection & ResponseIdentity & Access ManagementExposure Management
More open roles at Cyderes
- Security Analyst II, CrowdStrike Next-Gen SIEM5d agoHybrid (Bengaluru, Karnataka) · Managed Services & Consulting – 105 - Security Operations
- Engagement Lead, PAM5d agoHybrid (Bengaluru, Karnataka) · Identity Services – 310 - Managed Identity /
- Accounts Receivable & Payable Specialist5d agoHybrid (Bengaluru) · Corporate Functions – 803 - Finance
- Security Analyst II: Guardian1w agoRemote · Managed Services & Consulting – 105 - Security Operations
- Security Analyst II1w agoRemote · Managed Services & Consulting – 105 - Security Operations