Incident Response & Digital Forensics Consultant – London | Hybrid Working | On-Call Allowance

The Role

This position involves supporting organisations through live cyber security incidents, conducting digital forensic investigations, and analysing logs, network traffic, and endpoint activity. Consultants produce clear technical reports, advise clients on containment and recovery, and maintain current awareness of the evolving threat landscape.

Skills & Experience

Candidates should have a background in incident response, DFIR, or security operations, with strong knowledge of digital forensics methodologies and tooling. Excellent client-facing communication skills are essential. CREST, GIAC, or comparable certifications are desirable, as is experience investigating ransomware incidents. Security clearance eligibility is required.

Who It Suits

This role suits an analytical and investigative cyber security professional who thrives under pressure and wants meaningful exposure to high-profile, real-world incidents. It is particularly well suited to someone looking to deepen their forensic expertise within a specialist consulting environment while working directly with affected clients.