Senior Digital Forensics and Incident Response (DFIR) Consultant

The Role

This position involves leading complex incident response engagements and conducting forensic investigations across Windows, Unix, and Linux environments. Day-to-day work includes collecting forensic artifacts, analysing logs and memory images, identifying indicators of compromise, building event timelines, and supporting remediation efforts for ransomware and cyber-extortion incidents.

Skills & Experience

Candidates should bring hands-on expertise in host and network forensics, malware analysis, and memory acquisition. Familiarity with forensic tooling, cyber kill-chain methodology, exfiltration techniques, and incident lifecycle management is essential. Experience liaising with legal counsel, insurers, and executive stakeholders is also expected at this level.

Who It Suits

This role suits a seasoned DFIR professional who thrives under pressure and enjoys working across varied, high-stakes engagements. Someone comfortable operating independently, communicating findings to both technical and non-technical audiences, and staying current with the evolving threat landscape will find this position well matched to their strengths.