Consultant, Digital Forensics and Incident Response
Control Risks
London, England
The Role
The role involves providing forensic and incident response consultancy across data collections, cyber investigations and eDiscovery for a diverse client base. The consultant acts as technical lead on cases, produces expert reports and witness statements, provides court testimony, and contributes to business development through articles, presentations and client proposals. International travel of up to 25% is expected.
Skills & Experience
Candidates must demonstrate hands-on experience with forensic tools including EnCase, FTK, Nuix, X-Ways, Cellebrite and Velociraptor, alongside proficiency in PowerShell, Python, Bash and SQL. A strong understanding of MITRE ATT&CK, Cyber Kill Chain, EDR solutions, and cloud platforms such as Azure, AWS and Microsoft 365 is required. Certifications such as EnCE, ACE or GCFE are preferred.
Who It Suits
This position suits an experienced digital forensics professional with a background spanning both forensic examination and incident response, who is comfortable in client-facing and court environments. Those with a degree in computer forensics or IT, a track record of evidential-standard casework, and an appetite for business development will thrive in this consultancy setting.
Typical advertised salary for Digital Forensics roles in United Kingdom: £36,000–£52,000 (median £43,000 — from 64 recent listings analysed by Forensic Focus).
Compare Digital Forensics salaries in United Kingdom →
Certifications mentioned: GCFE · EnCE — find training for these on the DFIR Training Finder.
