Principal Consultant – DFIR

The Role

This position leads technical engagements across digital forensics and incident response, managing emergency situations from initial triage through remediation. Day to day, the consultant coordinates team workflows, conducts intelligence-driven investigations, produces high-quality client deliverables, and contributes to cyber threat assessments while also fulfilling line management and mentoring responsibilities.

Skills & Experience

Candidates require substantial experience in incident response, security operations, or security consulting, with strong technical grounding in host forensics, memory and log analysis, network investigation, EDR tooling, and malware analysis. Familiarity with case management systems and the ability to communicate security posture clearly to clients is expected.

Who It Suits

This role suits a seasoned DFIR professional who thrives in high-pressure, fast-moving environments and is ready to step into a leadership capacity. Someone who balances deep technical expertise with strong communication skills and a genuine interest in developing colleagues will find this position a natural fit.