Lead Consultant – FortiGuard Incident Response

About the role

We are looking for a Lead Consultant – FortiGuard Incident Response to join Fortinet’s Security Consulting Services. Reporting to the Director of Operations, you will work with a world‑class incident response and forensics team, leading engagements and mentoring junior analysts.

Key responsibilities

• Lead incident response engagements, serve as primary client contact and provide technical and executive updates.
• Conduct host‑based analysis and forensic investigations on Windows, Linux and macOS systems.
• Review firewall, web, database and other logs to uncover evidence of compromise.
• Leverage the FortiEDR platform to detect and analyze threats rapidly.
• Perform memory forensics, file analysis and basic reverse engineering of malicious tools.
• Develop comprehensive reports and presentations for technical and executive audiences.

Required profile

• Strong consulting and communication skills with ability to work under tight timelines.
• Highly motivated, self‑driven and capable of working independently or within a team.
• Willingness to be on‑call for nights and weekends as needed for incident response.

Required skills

• Proficiency in at least one scripting language (Shell, Ruby, Perl, Python, etc.).
• Experience with YARA, regular expressions, and data‑mining techniques.
• Familiarity with forensic tools such as EnCase, FTK, X‑Ways, SIFT, Splunk, Redline, Volatility, Wireshark, TCPDump.
• Hands‑on malware analysis using IDA Pro, OllyDbg, Immunity Debugger.
• Knowledge of Windows, Linux and macOS internals, endpoint security and Active Directory.