Consultant, Cybersecurity

FTI Consulting; Madrid; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Pension

Flexible work

Professional development

Job summary

FTI Consulting in Madrid is seeking a Consultant for our expanding EMEA Cybersecurity practice. You will work on challenging cyber investigations, helping clients respond to incidents and develop investigative approaches.

The role combines DFIR work with clear, client‑facing reporting, cross‑functional collaboration and opportunities to gain professional certifications while advancing within a global consulting firm.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics or related discipline.
• Hands‑on experience in Digital Forensics and Incident Response (DFIR) or cybersecurity incident response.
• Experience investigating cybersecurity incidents and analyzing indicators of compromise.
• Experience acquiring and analyzing forensic images/artifacts from Windows, Linux, macOS or mobile devices.
• Familiarity with forensic tools such as FTK Imager, EnCase, Magnet AXIOM, Cellebrite, Volatility.
• Experience using endpoint/network telemetry tools like Wireshark, Splunk, ELK.
• Familiarity with EDRs such as SentinelOne, CrowdStrike or Carbon Black.
• Understanding of evidence preservation, chain of custody and forensic documentation.
• Knowledge of NIST, ISO 27001 and GDPR concepts.
• Strong English and Spanish written and verbal communication; client‑facing skills.
• Willingness to travel and work in a fast‑paced consulting environment.

Responsibilities

• Support and execute cybersecurity engagements involving incident response, digital forensics and cyber investigations.
• Assist in investigation of security incidents including ransomware, data breaches and exfiltration.
• Acquire, preserve and analyze digital evidence from endpoints, servers and mobile devices.
• Conduct forensic analysis across Windows, Linux, macOS and mobile OS to identify indicators of compromise.
• Analyze artifacts to determine scope and impact of cybersecurity incidents.
• Use EDR, SIEM and DFIR tools to investigate and contain threats.
• Apply forensic methodologies and maintain chain of custody.
• Prepare clear technical reports and translate findings for stakeholders.
• Contribute to client presentations and recommendations.
• Support assessments and development of investigative approaches and IR procedures.
• Stay updated on threats and best practices; collaborate across the practice.
• Travel to client sites and offices as required.

Job description

Who We Are

FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations.

Who We Are

FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations.

Who We Are

FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations.

About The Role

Our Cybersecurity team helps clients solve complex cybersecurity challenges, including some of their most sensitive and critical incidents. Our clients include leading global brands, financial institutions, law firms and multinational corporations, for whom discretion, confidentiality and sound professional judgment are essential.

We support organizations in responding to cyber incidents, investigating security breaches, identifying threat actors and understanding the scope and impact of cyberattacks. Our work combines technical expertise in Digital Forensics and Incident Response (DFIR) with investigative skills and the ability to communicate complex technical findings clearly to clients and stakeholders.

Following a period of significant growth, FTI Consulting is continuing to expand its EMEA Cybersecurity practice. We are looking for a Consultant to join our team in Madrid, contributing to client engagements in a fast‑paced, collaborative and evolving environment.

This is an opportunity to work on challenging cybersecurity investigations, develop your technical expertise and contribute to the growth of an established global consulting practice.

What You’ll Do

• Support and execute cybersecurity engagements involving incident response, digital forensics and cyber investigations.
• Assist in the investigation of security incidents, including ransomware attacks, data breaches, unauthorized access and suspected data exfiltration.
• Acquire, preserve and analyze digital evidence from endpoints, servers, mobile devices and other relevant systems.
• Conduct forensic analysis across Windows, Linux, macOS and mobile operating systems to identify indicators of compromise, reconstruct attacker activity and establish incident timelines.
• Analyze endpoint, network and system artifacts to determine the nature, scope and impact of cybersecurity incidents.
• Use EDR, SIEM and digital forensic tools to investigate suspicious activity, identify threats and support incident containment and remediation.
• Apply established forensic methodologies and maintain appropriate evidence-handling procedures, including chain of custody.
• Prepare clear, accurate and well-structured technical reports, documenting findings and translating complex technical information into actionable conclusions.
• Contribute to client presentations and communicate findings and recommendations to technical and non-technical stakeholders.
• Support cybersecurity assessments and the development of investigative approaches, technical methodologies and incident response procedures.
• Stay up to date with emerging cyber threats, attack techniques, forensic methodologies and industry best practices.
• Collaborate with colleagues across the global Cybersecurity practice and other FTI Consulting service lines.
• Travel to client sites and FTI Consulting offices when required.

How You’ll Grow

We are committed to investing in your professional development and providing opportunities to strengthen your technical, analytical and consulting skills.

You will benefit from hands‑on experience across a variety of cybersecurity engagements, continuous learning opportunities and support for relevant professional certifications. You will also have access to coaching and mentoring to help you develop your expertise and progress in your career.

What You Will Need to Succeed

We are looking for a technically curious and analytical professional who enjoys investigating complex problems, working with digital evidence and helping organizations respond to critical cybersecurity incidents.

You should demonstrate sound judgment, attention to detail, a structured approach to problem‑solving and the ability to work effectively in a collaborative, client‑facing environment.

Basic Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics or a related discipline, or equivalent practical experience.
• Professional experience in Digital Forensics and Incident Response (DFIR), cybersecurity incident response, digital investigations or a closely related technical role.
• Hands‑on experience investigating and responding to cybersecurity incidents, including the identification and analysis of indicators of compromise.
• Practical experience acquiring, preserving and analyzing forensic images and artifacts from Windows, Linux, macOS and/or mobile devices.
• Familiarity with digital forensic and incident response tools such as FTK Imager, EnCase, Magnet AXIOM, Cellebrite and Volatility.
• Experience analyzing endpoint and network telemetry using tools such as Wireshark, Splunk, ELK or similar platforms.
• Familiarity with EDR solutions such as SentinelOne, CrowdStrike or Carbon Black.
• Understanding of evidence preservation, forensic documentation and chain-of-custody procedures.
• Knowledge of common attack techniques, threat intelligence, data exfiltration and data loss prevention concepts.
• Familiarity with cybersecurity frameworks, standards and regulations such as NIST, ISO 27001 and GDPR.
• Strong analytical, investigative and problem‑solving skills, with the ability to document technical findings clearly.
• Excellent written and verbal communication skills in English and Spanish.
• Ability to work in a fast‑paced, client‑focused environment and manage competing priorities.
• Willingness to travel when required.

Preferred Qualifications

• Relevant digital forensics, incident response or cybersecurity certifications, such as GCFE, GCFA, GCIH, GNFA or equivalent.
• Experience investigating ransomware incidents, business email compromise, insider threats or data breaches.
• Familiarity with memory forensics, disk forensics, timeline analysis, malware triage and threat hunting.
• Scripting skills in Python, PowerShell or Bash.
• Knowledge of MITRE ATT&CK and common adversary tactics, techniques and procedures.
• Experience supporting incident response engagements in a professional services, consulting or corporate environment.
• Italian and / or Portuguese language skills would be a plus.
• Willingness to pursue additional professional certifications and continuously develop technical expertise.

Total Wellbeing

Our goal is to support the wellbeing of you and your families - physically, emotionally, and financially. We offer market competitive benefits (including pension), supplemented by 15 flexible benefits, to meet your needs. These include health, lifestyle and family friendly options. We also offer professional development programme, wellness, recognition, community volunteering initiatives, and flexible/hybrid working arrangements.

About FTI Consulting

FTI Consulting, Inc. is the leading global expert firm for organizations facing crisis and transformation, with more than 7,900 employees located in 32 countries and territories. Our broad and diverse bench of award-winning experts advise their clients when they are facing their most significant opportunities and challenges. The Company generated $3.7 billion in revenues during fiscal year 2024. In certain jurisdictions, FTI Consulting’s services are provided through distinct legal entities that are separately capitalized and independently managed. FTI Consulting is publicly traded on the New York Stock Exchange. For more information, visit www.fticonsulting.com and connect with us on Instagram and LinkedIn.

FTI Consulting is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation.

FTI Consulting is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation.