Cybersecurity DFIR Consultant - Incident Response (Madrid)

FTI Consulting; Madrid; Vor Ort; EUR 70.000 - 95.000; Vollzeit

Zusammenfassung

FTI Consulting in Madrid is seeking a Consultant for its expanding EMEA Cybersecurity practice. You will join a team that handles incident response, digital forensics and cyber investigations for global clients, balancing analytical rigor with clear communication.

The role offers exposure to leading tools, collaboration across geographies, and opportunities to develop expertise in DFIR, GDPR compliance, and threat intelligence, with travel to client sites as required.

Qualifikationen

• Bachelor’s degree in CS, Cybersecurity, DF or related discipline.
• Experience in DFIR, incident response, digital investigations or related technical role.
• Hands‑on experience acquiring, preserving and analyzing forensic images and artifacts from Windows, Linux, macOS and/or mobile devices.
• Familiarity with FTK Imager, EnCase, Magnet AXIOM, Cellebrite and Volatility.
• Experience analyzing endpoint and network telemetry with Wireshark, Splunk, ELK or similar.
• Familiarity with EDRs such as SentinelOne, CrowdStrike or Carbon Black.
• Understanding of evidence preservation, chain‑of‑custody procedures.
• Knowledge of MITRE ATT&CK, ISO27001, GDPR.
• Excellent English and Spanish communication skills.
• Willingness to travel when required.

Aufgaben

• Support and execute cybersecurity engagements involving incident response, digital forensics and cyber investigations.
• Assist in the investigation of security incidents, including ransomware attacks, data breaches, unauthorized access and suspected data exfiltration.
• Acquire, preserve and analyze digital evidence from endpoints, servers, mobile devices and other systems.
• Conduct forensic analysis across Windows, Linux, macOS and mobile OS to identify indicators of compromise and timelines.
• Analyze endpoint, network and system artifacts to determine the nature and impact of incidents.
• Use EDR, SIEM and DFIR tools to investigate threats and support containment and remediation.
• Apply established forensic methodologies and maintain evidence handling and chain‑of‑custody.
• Prepare clear, accurate technical reports translating findings for clients and stakeholders.
• Contribute to client presentations and communicate findings to technical and non‑technical audiences.
• Support cybersecurity assessments and development of investigative methodologies.
• Stay up to date with emerging threats and best practices.
• Collaborate with global Cybersecurity practice and other service lines.
• Travel to client sites and offices as required.

Kenntnisse

Digital forensics

Incident response

Cyber investigations

Threat indicators

Windows forensics

Linux forensics

macOS forensics

EDR tools

Wireshark

Splunk/ELK

English

Spanish

Ausbildung

Bachelor's degree in Computer Science, Cybersecurity, Digital Forensics or related discipline

Tools

FTK Imager

EnCase

Magnet AXIOM

Cellebrite

Volatility

Wireshark

Splunk

ELK

SentinelOne

CrowdStrike

Carbon Black

Jobbeschreibung

FTI Consulting in Madrid is seeking a Consultant for its expanding EMEA Cybersecurity practice. You will join a team that handles incident response, digital forensics and cyber investigations for global clients, balancing analytical rigor with clear communication.

The role offers exposure to leading tools, collaboration across geographies, and opportunities to develop expertise in DFIR, GDPR compliance, and threat intelligence, with travel to client sites as required.