Consultant – DFIR

The Role

This consultant position involves delivering digital forensics and incident response engagements for clients, working as part of a collaborative team. Day-to-day responsibilities include conducting investigations, supporting containment strategies, advising on attacker behaviour and risk, producing client reports, and developing and delivering security training.

Skills & Experience

Candidates should bring hands-on knowledge of digital forensic tools, methods, and artefact analysis, alongside proficiency in at least one domain such as network, endpoint, or cloud security. Familiarity with EDR, SIEM, IDS/IPS, and the PICERL framework is expected, as is scripting capability in Python, PowerShell, or Bash.

Who It Suits

This role suits a mid-level security professional with several years of DFIR experience who is comfortable managing client-facing work and contributing to team knowledge sharing. Someone analytical, collaborative, and capable of translating complex technical findings into clear guidance for both technical and non-technical stakeholders will thrive here.