Digital Forensics & Incident Response Consultant

The Role

The role centres on leading and executing end-to-end digital forensics and incident response engagements, from identification and containment through to eradication and recovery. Day-to-day work includes forensic examination of servers, workstations, network systems and cloud platforms, log analysis, and producing detailed narrative reports for clients and stakeholders.

Skills & Experience

Candidates should have proven DFIR experience and proficiency with forensic tooling such as X-Ways. Knowledge of incident response frameworks (NIST, SANS), network protocols, operating systems, and cloud platforms including Azure and AWS is expected. Scripting skills in Python or PowerShell and recognised DFIR certifications are advantageous.

Who It Suits

This role suits an experienced DFIR practitioner comfortable working independently on concurrent engagements under pressure. Those who can communicate complex technical findings clearly to non-technical audiences, manage client relationships, and participate in an on-call rotation will thrive in this consultancy environment.