Senior Consultant (Remote-U.S. Based)

Title: Senior Consultant – Incident Response

Work Location: Remote

Travel: As needed up to 20%

Summary:

Since 2009, Kivu has specialized in identifying, containing, and mitigating cyber threats. Boasting a legacy of over 16 years, Kivu has established itself as a global leader in incident response. In 2024, Kivu was acquired by Quorum Cyber, one of the fastest-growing cybersecurity companies in North America. Protecting over 400 customers across four continents, we deliver tailored, threat-led cybersecurity services that empower organizations to stay ahead of attackers, align security with business goals, and thrive in an unpredictable digital world. 

Our culture fosters innovation, collaboration, and continuous learning. We're passionate about cybersecurity and dedicated to building a supportive, inclusive environment where our team can develop, grow, and win. 

Job Description:

Kivu Consulting’s Incident Response practice is rapidly growing, and we are hiring senior level incident response professionals to work with our expansive customer base.  We are continuing to enhance our incident response, forensics, and threat hunting team capabilities.  By joining Kivu Consulting, you will be part of a highly specialized team to respond to data breaches in complex business environments using a variety of tools and techniques.  As a teammate, you will work in a fast-paced and highly collaborative environment alongside a diverse and talented team in support our mission of providing world-class incident response services to our clients.

Kivu’s Senior Consultants have broad experience in security consulting services with a deep focus on Incident Response and the tools, tactics, and procedures used by attackers.  Our Senior consultants understand the big picture and are adept at setting and delivering to client expectations with the highest degree of quality.

Required Knowledge, Skills, Abilities:

• 
  Five or more years of experience in incident response, including commonly used tools such as EnCase and two or more of the following:
  • 
    Windows disk and memory forensics
  • 
    Unix or Linux disk and memory forensics
  • 
    Mac Forensics
  • 
    Mobile Forensics
  • 
    Network traffic analysis, and log analysis
  • 
    Static and dynamic malware analysis
• 
  Five or more years of experience and deep technical knowledge of techniques to collect evidence, maintain chain of custody and with supporting documentation, evidence storage, analysis, and evidentiary reporting.
• 
  Four or more years of experience and an understanding of cyber security operations, security monitoring, EDR, and SIEM tooling, e.g., Endgame, Falcon, and Splunk.
• 
  Must be able to work in the US without sponsorship.
  

Preferred Requirements:

• Security Certifications: CISSP, SANS GIAC (GCFA, GCIH, GRID)
• Knowledge of enterprise security controls related to authentication and identity management, security network architectures, and application-based security controls.
• Excellent time management, writing and communications skills.
• Network traffic and protocol analysis with tools like Wireshark.
• Experience building scripts, tools, and methodologies that enhance investigation processes.

Responsibilities and Duties:

• Lead end-to-end investigations, from kickoff through to post-breach remediation, with Kivu’s customers.
• Identify and investigate incidents to understand cause and extent of a breach leveraging Kivu’s technical tooling and threat intelligence sources.
• Conduct forensics, log, and malware analysis across a client’s environment in support of our investigations.
• Leverage findings from the investigation to develop and articulate expert level opinions to both technical and executive audiences.
• Develop comprehensive written reports and oral presentations to both technical and executive audiences.
• Effectively communicate and collaborate with customers including legal counsel, technical and executive stakeholders.
• Collaborate with practice leadership in leveraging subject matter expertise in the scoping of customer engagements.

Equipment Used:

All equipment required to perform duties and tasks were previously described.

Physical / Environmental Factors:

The physical demands are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Kivu Consulting considers applicants for all positions without regards to race, color, national origin, age, religion, sex, marital status, veteran or military status, disability, or any other legally protected status. Kivu Consulting is an Equal Opportunity Employer.

Benefits:

• 
  Flexible PTO
• 
  Medical, Dental, and Vision
• 
  401k
• 
  Remote Work

Compensation$100,000 - 140,000