Senior Cybersecurity DFIR Lead — Madrid

FTI Consulting Spain, S.L.U.; Madrid; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Market benefits

Flexible benefits

Wellbeing programs

Hybrid working

Job summary

FTI Consulting Spain, S.L.U. seeks a Senior Consultant to lead complex cybersecurity engagements in Madrid, focusing on Digital Forensics and Incident Response (DFIR) and coordinating client investigations.

You will manage engagements, mentor junior team members and contribute to business development while collaborating with international teams; travel to client sites is required and a hybrid working arrangement is available.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Digital Forensics or a related field, or equivalent experience.
• Significant experience in Digital Forensics and Incident Response (DFIR), including leading investigations into ransomware, data breaches and other cyber incidents.
• Strong hands-on expertise in forensic analysis across Windows, Linux, macOS and/or mobile devices, using tools such as FTK Imager, Magnet AXIOM, EnCase, Cellebrite and Volatility.
• Experience with EDR and SIEM tools, such as CrowdStrike, SentinelOne, Splunk or Wireshark.
• Strong understanding of evidence preservation, chain of custody, threat analysis and cybersecurity frameworks such as NIST, ISO 27001 and GDPR.
• Proven ability to manage client engagements, produce technical reports, communicate findings and mentor junior team members.
• Excellent written and verbal communication skills in English and Spanish.
• Ability to work under pressure and travel when required.

Responsibilities

• Lead and deliver cybersecurity engagements involving Digital Forensics and Incident Response (DFIR), including ransomware attacks, data breaches and other complex security incidents.
• Plan and conduct forensic investigations, acquiring and analyzing digital evidence across endpoints, servers, networks and mobile devices.
• Identify indicators of compromise, reconstruct attacker activity, determine root causes and assess the scope and impact of incidents.
• Use digital forensic, EDR and SIEM tools to investigate threats and support incident containment and remediation.
• Prepare and review technical reports, translating complex findings into actionable recommendations for clients and senior stakeholders.
• Manage client relationships, coordinate engagement delivery and ensure high-quality outputs within agreed deadlines.
• Mentor junior consultants, review their work and contribute to the development of the team.
• Support business development activities, including proposals, service development and the improvement of investigative methodologies.
• Stay up to date with emerging cyber threats, forensic techniques and industry best practices.
• Collaborate with international teams and travel to client sites when required.

Skills

DFIR expertise

Incident response

Client engagement

Digital forensics

English and Spanish

Education

Bachelor’s degree in Cybersecurity/CS/Digital Forensics

Tools

FTK Imager

Magnet AXIOM

EnCase

Cellebrite

Volatility

CrowdStrike

SentinelOne

Splunk

Wireshark

Job description

FTI Consulting Spain, S.L.U. seeks a Senior Consultant to lead complex cybersecurity engagements in Madrid, focusing on Digital Forensics and Incident Response (DFIR) and coordinating client investigations.

You will manage engagements, mentor junior team members and contribute to business development while collaborating with international teams; travel to client sites is required and a hybrid working arrangement is available.