Digital Forensics and Incident Response (DFIR) Consultant

The Role

This position involves hands-on incident response work, including collecting forensic artifacts, analysing disk and memory images, reviewing host and appliance logs, and building event timelines. The consultant engages with insurance partners, legal counsel, and client technical teams to assess compromises and apply effective remediation strategies.

Skills & Experience

Candidates should bring at least two years of DFIR experience, strong knowledge of Windows and Unix/Linux systems, and familiarity with EDR/EPP technologies. Understanding of storage technologies such as RAID, NAS, and SAN is expected, alongside practical skills in forensic acquisition, malware analysis tooling, IOC identification, and log interpretation.

Who It Suits

This role suits an analytically minded forensics professional who thrives under pressure in fast-moving breach scenarios. Someone comfortable liaising with senior stakeholders across legal, insurance, and executive functions, while maintaining technical rigour and staying current with the evolving threat landscape, will excel here.