Principal Security Consultant

Job not on LinkedIn

🔥 46 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Zenzero

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2004

🤝 B2B

🔒 Cybersecurity

💼 Consulting

B2B • Cybersecurity • Consulting

Zenzero is a UK-based technology services and managed service provider that helps organisations with IT support, cloud transformation, cyber security, data & AI, and software development — with a strong focus on Microsoft technologies (Azure, Microsoft 365, Dynamics 365, Power Platform). As a Microsoft Solutions Partner, Zenzero offers managed services (24/7 support, disaster recovery, managed detection & response), consultancy and strategy (technology and data strategy, workforce training), and AI integration (Microsoft Copilot, Power BI, predictive analytics) for regulated and growth-oriented sectors such as financial services, legal, care providers, and deep tech. The company positions itself as a B2B partner delivering secure, scalable digital transformation, compliance support, and cyber resilience.

📋 Description

• Lead end-to-end incident response engagements involving ransomware, BEC, and ClickFix attacks • Own forensic investigations across Windows environments, Active Directory, Microsoft 365, Azure, and endpoint platforms • Drive the production of executive-level and technical reports communicating root cause, attacker activity, and business impact • Advise clients on containment strategies, recovery planning, and security improvement actions during live incidents • Mentor and coach consultants and analysts, raising technical capability across the DFIR team • Build and enhance forensic tooling, playbooks, investigation timelines, and MITRE ATT&CK-aligned methodologies • Partner with pre-sales and business development teams to support scoping discussions and client proposals

🎯 Requirements

• Proven ability to lead complex DFIR investigations and manage client-facing incident response engagements • Deep understanding of ransomware intrusion lifecycles and adversary tradecraft • Strong expertise in Microsoft 365 and BEC investigations, including audit log analysis and identity compromise scenarios • Advanced knowledge of Windows host forensics, evidence collection, event log analysis, and memory analysis techniques • Experience presenting technical findings and recommendations to senior stakeholders • Strong communication, judgement, and decision-making skills under pressure • Degree-level education in a relevant discipline or equivalent practical experience • Experience supporting insurer-led or legally privileged investigations • Experience within an NCSC CIR Enhanced organisation • Knowledge of Google Workspace investigations • Industry certifications such as GCFA, GCFE, GCIH, GNFA, GREM, CREST CCIM, or CRIA

🏖️ Benefits

• Private health insurance • Generous holiday allowance + a day off on your birthday • Flexible working patterns • Enhanced pension contributions • Regular social events across all our offices

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume