Incident Response Consultant

Incident Response & Security Consultant - EMEA (Remote)

We’re hiring on behalf of a market-leading cybersecurity firm providing deep visibility and real-time threat detection to some of the world’s most sensitive organizations.

This is a client-facing security consulting role, focused on helping enterprise and public sector customers across EMEA improve their detection and response posture. You’ll work closely with CISOs, SOCs, and threat intel teams to assess readiness, implement tooling, and guide clients through proactive and reactive engagements.

Responsibilities

• Advise customers on detection, response, and overall SOC/IR maturity
• Lead readiness assessments, tabletop exercises, and incident simulations
• Help design and implement detection engineering and response playbooks
• Deliver workshops and recommendations aligned to MITRE ATT&CK, NIST, ISO 27035
• Collaborate with sales, engineering, and threat intel teams as the security SME
• Build strong relationships across technical and exec-level stakeholders
• Support clients during actual incidents if/when required (as an advisor, not a front-line responder)

Requirements

• Strong background in cybersecurity consulting, ideally in a client-facing role
• Familiar with IR lifecycle: detection, triage, containment, investigation, recovery
• Exposure to tools like NetWitness, EDRs (e.g., CrowdStrike, SentinelOne), SIEMs (e.g., Splunk, QRadar)
• Experience working with enterprise or government clients
• Clear communication skills - able to simplify complex technical concepts for diverse audiences
• Comfortable advising CISOs and SOC leads; confident running workshops

Bonus Points

• Certifications: GCIA, GCIH, GCFA, CISSP, or similar
• Experience supporting clients in regulated sectors (finance, defense, government)
• Ability to operate across EMEA; multiple languages are a plus

Location

• Remote across EMEA.
• Some regional travel expected (typically 25–40%)