Crossposted using Lemmit.

Original post from /r/cybersecurity by /u/DFIR995 on 2023-07-05 23:45:52+00:00.


I currently work in incident response for a well-known FAANG. I have about 8 years of technology experience, 2 of those being in IR specifically. I’m looking to transition into a consulting role for the opportunity to go deeper into investigations at a higher frequency within a company like Crowdstrike or Mandiant (GC). I’d imagine I would fall somewhere within the high mid - senior range.

For those of you currently in consulting or any insights into the industry, how does the job market look for these types of positions? Would I be stupid to leave the job security I have now given the uncertainty in the job market? What is the current workload like and do you find it manageable or are you constantly underwater? Lastly, as I’m unfamiliar with how billable hours go into your TC, how is your pay structure split up and do you find you’re well compensated?

I appreciate answering the barrage of questions for those that do. Thanks!