Cybersecurity DFIR Consultant – Madrid

FTI Consulting; Madrid; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Pension

Flexible work

Professional development

Job summary

FTI Consulting in Madrid is seeking a Consultant for our expanding EMEA Cybersecurity practice. You will work on challenging cyber investigations, helping clients respond to incidents and develop investigative approaches.

The role combines DFIR work with clear, client‑facing reporting, cross‑functional collaboration and opportunities to gain professional certifications while advancing within a global consulting firm.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics or related discipline.
• Hands‑on experience in Digital Forensics and Incident Response (DFIR) or cybersecurity incident response.
• Experience investigating cybersecurity incidents and analyzing indicators of compromise.
• Experience acquiring and analyzing forensic images/artifacts from Windows, Linux, macOS or mobile devices.
• Familiarity with forensic tools such as FTK Imager, EnCase, Magnet AXIOM, Cellebrite, Volatility.
• Experience using endpoint/network telemetry tools like Wireshark, Splunk, ELK.
• Familiarity with EDRs such as SentinelOne, CrowdStrike or Carbon Black.
• Understanding of evidence preservation, chain of custody and forensic documentation.
• Knowledge of NIST, ISO 27001 and GDPR concepts.
• Strong English and Spanish written and verbal communication; client‑facing skills.
• Willingness to travel and work in a fast‑paced consulting environment.

Responsibilities

• Support and execute cybersecurity engagements involving incident response, digital forensics and cyber investigations.
• Assist in investigation of security incidents including ransomware, data breaches and exfiltration.
• Acquire, preserve and analyze digital evidence from endpoints, servers and mobile devices.
• Conduct forensic analysis across Windows, Linux, macOS and mobile OS to identify indicators of compromise.
• Analyze artifacts to determine scope and impact of cybersecurity incidents.
• Use EDR, SIEM and DFIR tools to investigate and contain threats.
• Apply forensic methodologies and maintain chain of custody.
• Prepare clear technical reports and translate findings for stakeholders.
• Contribute to client presentations and recommendations.
• Support assessments and development of investigative approaches and IR procedures.
• Stay updated on threats and best practices; collaborate across the practice.
• Travel to client sites and offices as required.

Job description

FTI Consulting in Madrid is seeking a Consultant for our expanding EMEA Cybersecurity practice. You will work on challenging cyber investigations, helping clients respond to incidents and develop investigative approaches.

The role combines DFIR work with clear, client‑facing reporting, cross‑functional collaboration and opportunities to gain professional certifications while advancing within a global consulting firm.