Senior Incident Response Consultant

Job Summary

Zurich NA is seeking a Senior Incident Response Consultant to join its SpearTip cyber‑security consulting team in Sacramento, Sacramento County, US. This senior‑level role focuses on leading advanced threat investigations, guiding clients through complex security incidents, and shaping proactive defense strategies.

Key Responsibilities

• Lead end‑to‑end incident response engagements for Fortune‑500 and mid‑market clients, from detection to remediation.
• Conduct deep‑dive forensic analysis on compromised systems, networks, and cloud environments.
• Develop and deliver detailed incident reports, executive briefings, and actionable remediation roadmaps.
• Collaborate with Zurich Resilience Solutions’ threat intel team to integrate zero‑day detection techniques and cyber counter‑intelligence tactics.
• Mentor junior consultants, provide technical training, and contribute to knowledge‑base articles.
• Assist in building and refining incident response playbooks, automation scripts, and detection rules.
• Stay current on emerging threat actors, attack vectors, and industry best practices to ensure Zurich remains the gold standard in cyber defense.

Required Qualifications

• 5+ years of hands‑on experience in incident response, digital forensics, or threat hunting.
• Strong knowledge of Windows, Linux, and cloud platforms (AWS, Azure, GCP).
• Proficiency with forensic tools (e.g., EnCase, FTK, X‑Way, Volatility) and SIEM solutions (Splunk, QRadar, Sentinel).
• Relevant certifications such as GCIH, GCFA, CISSP, or CISM preferred.
• Excellent communication skills for interacting with technical teams and executive stakeholders.
• Ability to work under pressure, manage multiple incidents simultaneously, and travel to client sites as needed.

What We Offer

• Competitive salary of $118,740.55 per year.
• Opportunity to work with cutting‑edge cyber‑security technologies and world‑class threat intel.
• Professional development budget for certifications, conferences, and training.
• Collaborative, inclusive culture within a global insurance leader.

Frequently Asked Questions

What does a Senior Incident Response Consultant do at Zurich NA?

You lead advanced cyber incident investigations, perform forensic analysis, create remediation plans, and mentor junior staff while collaborating with Zurich’s threat intelligence team.

What experience is required for this position?

At least 5 years of incident response or digital forensics experience, strong knowledge of Windows, Linux, cloud platforms, and proficiency with forensic and SIEM tools.

Is travel required for this role?

Yes, occasional travel to client sites is expected to conduct on‑site investigations and deliver briefings.