Dutch Digital Forensics and Incident Response (DFIR) Consultant

The Role

This position involves hands-on incident response work, including collecting forensic artifacts, analysing disk and memory images, reviewing host and appliance logs, and building event timelines. The consultant collaborates with insurers, legal teams, and client technical staff to assess compromise, identify indicators of compromise, and apply remediation strategies.

Skills & Experience

Candidates need at least two years in digital forensics or incident response, fluency in English and Dutch, and solid knowledge of Windows and Unix/Linux. Familiarity with EDR/EPP technologies, forensic acquisition methods, storage technologies such as RAID, NAS and SAN, malware analysis tools, and the cyber kill-chain framework is expected.

Who It Suits

This role suits a bilingual DFIR professional who is comfortable operating in fast-moving, high-stakes environments alongside insurers and legal counsel. Someone who keeps pace with emerging threats, works methodically under pressure, and brings both technical depth and clear stakeholder communication skills will thrive here.