Consultant, Cybersecurity

FTI Consulting Spain, S.L.U.; Madrid; On-site; EUR 55,000 - 90,000; Full time

Benefits offered by this job

Market competitive benefits

Flexible/hybrid working arrangements

Job summary

FTI Consulting Spain, S.L.U. is seeking a technically curious Cybersecurity Consultant to join our Madrid team.

You will lead investigations, perform digital forensics and incident response engagements, and translate complex technical findings into clear client guidance. You will work on challenging cyber incidents for global brands, collaborate across the global Cybersecurity practice, and travel to client sites as required, contributing to the growth of an established consulting practice in a

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity or related field would be expected.
• Professional experience in Digital Forensics and Incident Response (DFIR) or cybersecurity incident response.
• Hands-on experience with forensic images and artifacts.
• Knowledge of common attack techniques and GDPR/ISO standards.

Responsibilities

• Support and execute cybersecurity engagements involving incident response and digital forensics.
• Assist in investigation of security incidents including data breaches.
• Acquire and analyze digital evidence from endpoints and servers.
• Prepare clear reports and communicate findings to stakeholders.
• Travel to client sites when required.

Job description

Who We Are

FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations. At FTI Consulting, you’ll work side-by-side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you’ll be an integral part of a focused team where you can make a real impact. You’ll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you. Are you ready to make your impact?

FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations. At FTI Consulting, you’ll work side-by-side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you’ll be an integral part of a focused team where you can make a real impact. You’ll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you. Are you ready to make your impact?

About The Role

Our Cybersecurity team helps clients solve complex cybersecurity challenges, including some of their most sensitive and critical incidents. Our clients include leading global brands, financial institutions, law firms and multinational corporations, for whom discretion, confidentiality and sound professional judgment are essential. We support organizations in responding to cyber incidents, investigating security breaches, identifying threat actors and understanding the scope and impact of cyberattacks. Our work combines technical expertise in Digital Forensics and Incident Response (DFIR) with investigative skills and the ability to communicate complex technical findings clearly to clients and stakeholders. Following a period of significant growth, FTI Consulting is continuing to expand its EMEA Cybersecurity practice. We are looking for a Consultant to join our team in Madrid, contributing to client engagements in a fast-paced, collaborative and evolving environment. This is an opportunity to work on challenging cybersecurity investigations, develop your technical expertise and contribute to the growth of an established global consulting practice.

What You’ll Do

• Support and execute cybersecurity engagements involving incident response, digital forensics and cyber investigations.
• Assist in the investigation of security incidents, including ransomware attacks, data breaches, unauthorized access and suspected data exfiltration.
• Acquire, preserve and analyze digital evidence from endpoints, servers, mobile devices and other relevant systems.
• Conduct forensic analysis across Windows, Linux, macOS and mobile operating systems to identify indicators of compromise, reconstruct attacker activity and establish incident timelines.
• Analyze endpoint, network and system artifacts to determine the nature, scope and impact of cybersecurity incidents.
• Use EDR, SIEM and digital forensic tools to investigate suspicious activity, identify threats and support incident containment and remediation.
• Apply established forensic methodologies and maintain appropriate evidence-handling procedures, including chain of custody.
• Prepare clear, accurate and well-structured technical reports, documenting findings and translating complex technical information into actionable conclusions.
• Contribute to client presentations and communicate findings and recommendations to technical and non-technical stakeholders.
• Support cybersecurity assessments and the development of investigative approaches, technical methodologies and incident response procedures.
• Stay up to date with emerging cyber threats, attack techniques, forensic methodologies and industry best practices.
• Collaborate with colleagues across the global Cybersecurity practice and other FTI Consulting service lines.
• Travel to client sites and FTI Consulting offices when required.

How You’ll Grow

We are committed to investing in your professional development and providing opportunities to strengthen your technical, analytical and consulting skills. You will benefit from hands‑on experience across a variety of cybersecurity engagements, continuous learning opportunities and support for relevant professional certifications. You will also have access to coaching and mentoring to help you develop your expertise and progress in your career.

What You Will Need to Succeed

We are looking for a technically curious and analytical professional who enjoys investigating complex problems, working with digital evidence and helping organizations respond to critical cybersecurity incidents. You should demonstrate sound judgment, attention to detail, a structured approach to problem‑solving and the ability to work effectively in a collaborative, client‑facing environment.

Basic Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics or a related discipline, or equivalent practical experience.
• Professional experience in Digital Forensics and Incident Response (DFIR), cybersecurity incident response, digital investigations or a closely related technical role.
• Hands‑on experience investigating and responding to cybersecurity incidents, including the identification and analysis of indicators of compromise.
• Practical experience acquiring, preserving and analyzing forensic images and artifacts from Windows, Linux, macOS and/or mobile devices.
• Familiarity with digital forensic and incident response tools such as FTK Imager, EnCase, Magnet AXIOM, Cellebrite and Volatility.
• Experience analyzing endpoint and network telemetry using tools such as Wireshark, Splunk, ELK or similar platforms.
• Familiarity with EDR solutions such as SentinelOne, CrowdStrike or Carbon Black.
• Understanding of evidence preservation, forensic documentation and chain‑of‑custody procedures.
• Knowledge of common attack techniques, threat intelligence, data exfiltration and data loss prevention concepts.
• Familiarity with cybersecurity frameworks, standards and regulations such as NIST, ISO 27001 and GDPR.
• Strong analytical, investigative and problem‑solving skills, with the ability to document technical findings clearly.
• Excellent written and verbal communication skills in English and Spanish.
• Ability to work in a fast‑paced, client‑focused environment and manage competing priorities.
• Willingness to travel when required.

Preferred Qualifications

• Relevant digital forensics, incident response or cybersecurity certifications, such as GCFE, GCFA, GCIH, GNFA or equivalent.
• Experience investigating ransomware incidents, business email compromise, insider threats or data breaches.
• Familiarity with memory forensics, disk forensics, timeline analysis, malware triage and threat hunting.
• Scripting skills in Python, PowerShell or Bash.
• Knowledge of MITRE ATT&CK and common adversary tactics, techniques and procedures.
• Experience supporting incident response engagements in a professional services, consulting or corporate environment.
• Italian and / or Portuguese language skills would be a plus.
• Willingness to pursue additional professional certifications and continuously develop technical expertise.

Total Wellbeing

• We offer market competitive benefits (including pension), supplemented by 15 flexible benefits, to meet your needs.
• These include health, lifestyle and family friendly options.
• We also offer professional development programme, wellness, recognition, community volunteering initiatives, and flexible/hybrid working arrangements.

About FTI Consulting

FTI Consulting, Inc. is the leading global expert firm for organizations facing crisis and transformation, with more than 7,900 employees located in 32 countries and territories. Our broad and diverse bench of award-winning experts advise their clients when they are facing their most significant opportunities and challenges.

The Company generated $3.7 billion in revenues during fiscal year 2024.

In certain jurisdictions, FTI Consulting’s services are provided through distinct legal entities that are separately capitalized and independently managed.

FTI Consulting is publicly traded on the New York Stock Exchange.

FTI Consulting is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation. FTI Consulting is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation.