Senior Consultant, Cybersecurity

FTI Consulting Spain, S.L.U.; Madrid; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Market benefits

Flexible benefits

Wellbeing programs

Hybrid working

Job summary

FTI Consulting Spain, S.L.U. seeks a Senior Consultant to lead complex cybersecurity engagements in Madrid, focusing on Digital Forensics and Incident Response (DFIR) and coordinating client investigations.

You will manage engagements, mentor junior team members and contribute to business development while collaborating with international teams; travel to client sites is required and a hybrid working arrangement is available.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Digital Forensics or a related field, or equivalent experience.
• Significant experience in Digital Forensics and Incident Response (DFIR), including leading investigations into ransomware, data breaches and other cyber incidents.
• Strong hands-on expertise in forensic analysis across Windows, Linux, macOS and/or mobile devices, using tools such as FTK Imager, Magnet AXIOM, EnCase, Cellebrite and Volatility.
• Experience with EDR and SIEM tools, such as CrowdStrike, SentinelOne, Splunk or Wireshark.
• Strong understanding of evidence preservation, chain of custody, threat analysis and cybersecurity frameworks such as NIST, ISO 27001 and GDPR.
• Proven ability to manage client engagements, produce technical reports, communicate findings and mentor junior team members.
• Excellent written and verbal communication skills in English and Spanish.
• Ability to work under pressure and travel when required.

Responsibilities

• Lead and deliver cybersecurity engagements involving Digital Forensics and Incident Response (DFIR), including ransomware attacks, data breaches and other complex security incidents.
• Plan and conduct forensic investigations, acquiring and analyzing digital evidence across endpoints, servers, networks and mobile devices.
• Identify indicators of compromise, reconstruct attacker activity, determine root causes and assess the scope and impact of incidents.
• Use digital forensic, EDR and SIEM tools to investigate threats and support incident containment and remediation.
• Prepare and review technical reports, translating complex findings into actionable recommendations for clients and senior stakeholders.
• Manage client relationships, coordinate engagement delivery and ensure high-quality outputs within agreed deadlines.
• Mentor junior consultants, review their work and contribute to the development of the team.
• Support business development activities, including proposals, service development and the improvement of investigative methodologies.
• Stay up to date with emerging cyber threats, forensic techniques and industry best practices.
• Collaborate with international teams and travel to client sites when required.

Skills

DFIR expertise

Incident response

Client engagement

Digital forensics

English and Spanish

Education

Bachelor’s degree in Cybersecurity/CS/Digital Forensics

Tools

FTK Imager

Magnet AXIOM

EnCase

Cellebrite

Volatility

CrowdStrike

SentinelOne

Splunk

Wireshark

Job description

Who We Are

FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations. At FTI Consulting, you’ll work side‑by‑side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you’ll be an integral part of a focused team where you can make a real impact. You’ll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you.

About The Role

Our Cybersecurity team helps clients solve complex cybersecurity challenges, including some of their most sensitive and critical incidents. Our clients include leading global brands, financial institutions, law firms and multinational corporations, for whom discretion, confidentiality and sound professional judgment are essential. We support organizations in responding to cyber incidents, investigating security breaches, identifying threat actors and understanding the scope and impact of cyberattacks. Our work combines advanced technical expertise in Digital Forensics and Incident Response (DFIR) with investigative capabilities, strategic thinking and the ability to communicate complex technical findings clearly to clients and senior stakeholders.

Following a period of significant growth, FTI Consulting is continuing to expand its EMEA Cybersecurity practice. We are looking for a Senior Consultant to join our team in Madrid, taking an active role in delivering complex cybersecurity engagements, leading technical investigations and supporting the development of our client relationships and service offerings. This role offers the opportunity to take ownership of challenging DFIR engagements, mentor junior team members and contribute to the continued growth of an established global cybersecurity practice.

What You’ll Do

• Lead and deliver cybersecurity engagements involving Digital Forensics and Incident Response (DFIR), including ransomware attacks, data breaches and other complex security incidents.
• Plan and conduct forensic investigations, acquiring and analyzing digital evidence across endpoints, servers, networks and mobile devices.
• Identify indicators of compromise, reconstruct attacker activity, determine root causes and assess the scope and impact of incidents.
• Use digital forensic, EDR and SIEM tools to investigate threats and support incident containment and remediation.
• Prepare and review technical reports, translating complex findings into actionable recommendations for clients and senior stakeholders.
• Manage client relationships, coordinate engagement delivery and ensure high‑quality outputs within agreed deadlines.
• Mentor junior consultants, review their work and contribute to the development of the team.
• Support business development activities, including proposals, service development and the improvement of investigative methodologies.
• Stay up to date with emerging cyber threats, forensic techniques and industry best practices.
• Collaborate with international teams and travel to client sites when required.

How You’ll Grow

We are committed to investing in your professional development and supporting your progression into more senior technical and leadership roles. As a Senior Consultant, you will have the opportunity to lead complex investigations, strengthen your client management capabilities and develop your expertise across a broad range of cybersecurity challenges. You will also contribute to mentoring junior colleagues, improving delivery methodologies and helping shape the growth of the EMEA Cybersecurity practice. You will benefit from hands‑on experience, continuous learning opportunities, coaching and support for relevant industry certifications.

What You Will Need to Succeed

We are looking for an experienced cybersecurity professional with strong hands‑on DFIR capabilities, proven investigative skills and the ability to lead client engagements in demanding environments. You should be comfortable taking ownership of technical investigations, making sound decisions under pressure, communicating effectively with clients and supporting the development of less experienced team members.

Basic Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Digital Forensics or a related field, or equivalent experience.
• Significant experience in Digital Forensics and Incident Response (DFIR), including leading investigations into ransomware, data breaches and other cyber incidents.
• Strong hands‑on expertise in forensic analysis across Windows, Linux, macOS and/or mobile devices, using tools such as FTK Imager, Magnet AXIOM, EnCase, Cellebrite and Volatility.
• Experience with EDR and SIEM tools, such as CrowdStrike, SentinelOne, Splunk or Wireshark.
• Strong understanding of evidence preservation, chain of custody, threat analysis and cybersecurity frameworks such as NIST, ISO 27001 and GDPR.
• Proven ability to manage client engagements, produce technical reports, communicate findings and mentor junior team members.
• Excellent written and verbal communication skills in English and Spanish.
• Ability to work under pressure and travel when required.

Preferred Qualifications

• Relevant DFIR or cybersecurity certifications, such as GCFE, GCFA, GCIH or GNFA.
• Experience investigating complex cyber incidents and advanced knowledge of forensic analysis, malware triage and threat hunting.
• Scripting skills in Python, PowerShell or Bash, and familiarity with MITRE ATT&CK.
• Experience in cybersecurity consulting, client‑facing engagements, proposal development and client relationship management.
• Italian and / or Portuguese language skills would be a plus.
• Ability to mentor junior team members, review technical deliverables and continuously develop technical expertise.

Total Wellbeing

• Market competitive benefits (including pension).
• 15 flexible benefits.
• Health, lifestyle and family friendly options.
• Professional development programme, wellness, recognition, community volunteering initiatives, and flexible/hybrid working arrangements.

About FTI Consulting

FTI Consulting, Inc. is the leading global expert firm for organizations facing crisis and transformation, with more than 7,900 employees located in 32 countries and territories. Our broad and diverse bench of award‑winning experts advise their clients when they are facing their most significant opportunities and challenges. The Company generated $3.7 billion in revenues during fiscal year 2024. In certain jurisdictions, FTI Consulting’s services are provided through distinct legal entities that are separately capitalized and independently managed. FTI Consulting is publicly traded on the New York Stock Exchange. For more information, visit www.fticonsulting.com and connect with us on Instagram and LinkedIn.

FTI Consulting is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation.

FTI Consulting is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation.

With more than 8,100+ employees located in 32 countries and territories around the globe, we are the leading global expert firm for organizations facing crisis and transformation. Our experts have led organizations, shaped policy, driven investigations, managed crises, advised world leaders and built businesses from the ground up. Learn more about the work we do and how we’re helping clients around the world turn their biggest challenges and opportunities into stories of success. Learn more about our impact. We are committed to creating an inclusive culture where our people can grow and achieve their full potential. To learn more about FTI Consulting, visit www.fticonsulting.com/careers and connect with us on Instagram and LinkedIn.