Digital Forensics Consultant

The Role

This consultant-level position centres on forensic evidence collection, imaging, and analysis across endpoints, servers, cloud platforms, and network sources. Day-to-day work includes memory, disk, and log analysis to identify indicators of compromise, support breach investigations, triage affected systems, and contribute to client-facing findings reports under the guidance of a senior forensics lead.

Skills & Experience

Candidates should have up to four years of experience in digital forensics or incident response, with working knowledge of forensic imaging, chain of custody practices, and tools such as EnCase, FTK, Magnet AXIOM, X-Ways, Volatility, or KAPE. Familiarity with EDR platforms including CrowdStrike, SentinelOne, or Microsoft Defender is advantageous, as is experience with cloud and SaaS log analysis.

Who It Suits

This role suits an early- to mid-career forensics practitioner who is comfortable handling sensitive matters, including those directed by outside counsel, and who can communicate technical findings clearly to non-technical audiences. Candidates must be willing to support on-call incident response needs outside standard business hours.