DFIR Consultant

The Role

This fully remote position involves supporting clients through the full lifecycle of cyber incidents, from initial triage and evidence preservation through forensic analysis and final reporting. Day-to-day work centres on investigating Business Email Compromise and ransomware cases, delivering accurate and defensible findings that guide client recovery.

Skills & Experience

Candidates need a strong background in digital forensics and incident response, with hands-on investigative experience across complex cyber events. Familiarity with BEC and ransomware investigations is particularly relevant. A solid grounding in evidence handling, analysis methodology, and producing clear, defensible reports is expected.

Who It Suits

This role suits an experienced DFIR practitioner who works well within a collaborative team and thrives under the pressure of live incidents. Someone comfortable managing multiple investigations simultaneously, communicating findings clearly to varied audiences, and contributing meaningfully to a specialist, close-knit response function will excel here.