Mid-level Incident Response Consultant

Engagement

Contract position with an immediate start. Initial term is 6 to 12 months, likely to extend. Reports to the Sr. Director, Security Operations Center, with day‑to‑day direction from the SOC technical lead or the Sr. Director. Two incident responders are needed to pick up an active caseload right away. This is hands‑on investigative work; candidates must be able to start working cases within the first week, understand indicators of compromise, read alerts, and connect information that may prevent a larger incident.

Responsibilities

• Triage alerts and run investigations from initial detection through containment.
• Work assigned incidents end‑to‑end, escalating to the technical lead when severity or scope changes.
• Document findings and timelines clearly enough for handoff or audit.
• Participate in on‑call rotation.

Requirements

• 3 to 5 years of experience in incident response, SOC analyst, or similar hands‑on security operations work.
• Working knowledge of SIEM and EDR tools, log analysis, and common attack patterns.
• Able to work independently on a caseload from day one with minimal ramp time.
• Available to start within 1 to 2 weeks.

Compensation

$70 to $90 per hour (W2).

Requisition #: 3025