Incident Response Consultant
- Remote, United States
- Mid-level
- Posted 6 days ago
or apply from Claude / ChatGPT / Muse
Remote consulting role on incident response engagements for large organizations, doing forensics across Windows, Mac, and Linux.
About the role
Intrusion investigations run alongside project leads and outside counsel, with findings reported to customer management, regulators, and legal teams.
At a glance
- Pay
- Not stated in the posting
- Remote scope
- Remote, United States
- Seniority
- Mid-level
- Skills
- Incident response, Zeek, Suricata, Reverse engineering, Windows, Linux
- Posted
- 23 Oct 2026
- Last checked
- 26 Oct 2026
What you will do
- Serve on the technical team for incident response engagements
- Develop methods to hunt for attackers across large data sets
- Conduct intrusion investigations under project leadership and outside counsel
- Perform host and network forensics on Windows, Mac, and Linux systems
- Help produce written and verbal reports, presentations, and findings for stakeholders
What they look for
- Incident response experience investigating targeted threats such as nation-state, e-crime, or hacktivist activity
- Forensic analysis background using tools to scope and measure a compromise
- Knowledge of network protocols and tools like Zeek or Suricata, plus analysis of network logs
- Reverse engineering skills to understand static and dynamic capabilities of malware
How Keywordise applies for you
Alex Demo
[email protected]
From your CV
Yes, fully remote
- Sent
- 09:41
- Attached
- Your tailored CV
- 1Upload your CVAdd your CV once. It takes about a minute.
- 2Tailored to this jobKeywordise writes a CV and a cover letter for this job from your real experience.
- 3The form fills itselfName, email, experience and screening questions, field by field.
- 4Application sentYou get a receipt and follow it in your dashboard.
Apply with Keywordise AI7-day free trial, no card.
Apply from your AI assistant
Connect Keywordise to your assistant once, then send it the prompt. It applies for you.
Claude
- In Claude, open Settings, then Connectors, and choose Add custom connector.
- Name it Keywordise and paste the connector URL.
- Click Connect, log in to Keywordise and approve. Then send the prompt in a new chat.
https://keywordise.com/mcpDisconnect any time in your Keywordise settings.
ChatGPT
- In ChatGPT, open Settings, then Connectors. On plans that need it, turn on developer mode first.
- Add a new connector with the connector URL and choose OAuth. Leave the client ID and secret empty.
- Log in to Keywordise and approve. Then send the prompt in a new chat.
https://keywordise.com/mcpDisconnect any time in your Keywordise settings.
Muse
- Open Muse (muse.ai or the app) and send it the message below.
- If Muse asks how to sign in, answer OAuth. Open the sign-in link it sends, log in to Keywordise and approve.
- Send the prompt. Muse asks before it sends anything.
Add a custom connector called Keywordise. It is a remote MCP server at https://keywordise.com/mcp and uses OAuth. Give me the sign-in link.Muse is available in the US only for now.
Apply to Keywordise job agfzqlkfa4Questions about this job
Is this a remote job, and where can I work from?
The posting lists it as remote for people in the United States.
What does this job pay?
No pay range is stated in the posting.
What experience is needed?
It is a mid-level role. The posting asks for: incident response experience investigating targeted threats such as nation-state, e-crime, or hacktivist activity; forensic analysis background using tools to scope and measure a compromise; knowledge of network protocols and tools like Zeek or Suricata, plus analysis of network logs. Skills it names include Incident response, Zeek, Suricata, Reverse engineering.
How do I apply with Keywordise AI?
Press the Apply with Keywordise AI button and add your CV. Keywordise tailors your CV and cover letter to this posting and sends the application for you, with a free 7-day trial and no card.
More remote business and finance jobs
- CCrowdStrikeIncident Response Senior Consultant
- Remote, Europe
- CCrowdStrikeIncident Response Senior Consultant
- Remote, United States
- CCrowdStrikeIncident Response Senior Consultant
- Remote, Canada
- CCrowdStrikeManager, Incident Response Consulting
- Remote, United States
- CCrowdStrikeIncident Response Principal Consultant
- Remote, United States
- CCrowdStrikeIncident Response Senior Consultant
- Remote, United States