Cybersecurity Incident Response Consultant

FTI Consulting, Inc.; Comunidad de Madrid; On-site; EUR 52,000 - 76,000; Full time

Benefits offered by this job

Total Wellbeing program

Pension scheme

Flexible benefits

Hybrid working arrangements

Job summary

FTI Consulting is seeking a Consultant in Madrid to join its Cybersecurity practice. You’ll tackle complex investigations, perform DFIR work, and coordinate with global teams to support high‑impact client engagements. Fluency in English and Spanish is required, and travel may be involved.

You’ll develop technical methodologies, contribute to incident response procedures, and stay current with evolving cyber threats in a fast-paced, client-focused environment.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity or related field.
• Hands-on DFIR and incident response experience in a professional setting.
• Experience acquiring and analyzing forensic artifacts from multiple platforms.

Responsibilities

• Lead and support cybersecurity engagements including incident response and DFIR.
• Investigate security incidents (ransomware, data breaches) and determine scope.
• Preserve and analyze digital evidence from endpoints, networks and servers.
• Produce clear technical reports and present findings to stakeholders.
• Collaborate with global teams and travel to client sites as needed.

Skills

DFIR

Incident Response

Digital Forensics

Threat Analysis

Education

Bachelor's degree in Computer Science / Cybersecurity / Digital Forensics

Tools

FTK Imager

EnCase

Magnet AXIOM

Cellebrite

Volatility

Wireshark

Splunk

ELK

SentinelOne

CrowdStrike

Carbon Black

Job description

FTI Consulting is seeking a Consultant in Madrid to join its Cybersecurity practice. You’ll tackle complex investigations, perform DFIR work, and coordinate with global teams to support high‑impact client engagements. Fluency in English and Spanish is required, and travel may be involved.

You’ll develop technical methodologies, contribute to incident response procedures, and stay current with evolving cyber threats in a fast-paced, client-focused environment.