Senior Incident Response & DFIR Consultant

About the role

2Bsecure is seeking a Senior Incident Response & DFIR Consultant to join its Cyber Consulting team. You will lead investigations of sophisticated cyber attacks, work directly with executive and technical stakeholders, and help clients strengthen their security posture.

Key responsibilities

• Lead end‑to‑end incident response engagements across enterprise environments.
• Conduct digital forensics investigations, preserve evidence, and produce technical and executive reports.
• Analyze endpoints, servers, Active Directory, Microsoft 365, and cloud platforms to uncover attacker activity.
• Perform log analysis, identify IOCs, and map TTPs using the MITRE ATT&CK framework.
• Execute proactive threat‑hunting missions to detect hidden threats.
• Collaborate with customer executives, IT and security teams, and external vendors throughout engagements.
• Support penetration testing, risk assessments, and security audits as needed.

Required profile

• 3+ years of hands‑on incident response and digital forensics experience.
• Proven track record leading investigations for enterprise customers.
• Strong knowledge of Windows environments, Active Directory, and log analysis.
• Deep understanding of the MITRE ATT&CK framework.
• Excellent analytical, problem‑solving, and communication skills.
• Ability to manage multiple engagements independently.

Required skills

• Incident Response & Digital Forensics (DFIR)
• Windows, Active Directory, Log Analysis
• MITRE ATT&CK framework
• Microsoft Defender XDR, Microsoft Sentinel
• CrowdStrike, Cortex XDR
• Splunk, IBM QRadar
• Velociraptor, KAPE, Axiom
• Microsoft 365 investigations
• Azure, AWS, Google Cloud Platform
• Threat Hunting
• Penetration Testing
• Risk Assessment & Security Audits