Associate Consultant, Digital Forensics, Incident Response

Jobtailor; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Jobtailor is seeking an experienced digital forensics professional to support law firms, multinational clients and government bodies in digital investigations and eDiscovery. You will preserve digital evidence, perform forensic analysis and deliver expert reporting for regional and international teams.

The role requires collaboration with Cyber Response, Crisis Management and Investigations teams, as well as availability for international travel up to 25%.

Qualifications

• Experience in forensic data acquisitions and digital investigations with detailed notes.

Responsibilities

• Provide technical expertise and consultative solutions in Digital Forensics, Incident Response, Cyber Security and eDiscovery

Skills

Digital Forensics

Incident Response

Cyber Security

Forensic Data Acquisition

PowerShell

Python

SQL

Networking Systems

Education

BSc in IT or similar technical degree

BSc/MSc or equivalent in Computer Forensics

Tools

Logicube Falcon

Velociraptor

EnCase

FTK

Nuix

X-Ways

Axiom

Kali

Cellebrite

XRY

Job description

Responsibilities

• Provide technical expertise and consultative solutions in Digital Forensics, Incident Response, Cyber Security and eDiscovery
• Serve law firms, Fortune 500 multinationals and government/law-enforcement clients
• Preserve digital data and conduct forensic analysis of digital evidence
• Prepare reporting for regional and international Discovery & Data Insights teams
• Collaborate with Cyber Response, Crisis Management and Investigations teams
• Support experienced professionals in investigating data breaches and security incidents
• Collect and preserve digital data using industry-standard tools and techniques
• Assist with forensic analysis and cyber security services
• Support Investigation teams across all regions
• Deliver high-quality client deliverables in a timely and efficient manner
• Ensure work is defensible and meets evidential standards where appropriate
• Provide expert testimony in court when required
• Stay current with digital forensic techniques, tools and trends

Requirements

• Experience performing forensic data acquisitions and participating in digital investigations while maintaining detailed contemporaneous notes
• Understanding of multiple operating systems, especially Microsoft and Linux infrastructure and networking systems, on-premise and in the cloud
• Knowledge of Microsoft 365, Azure, AWS and Google Workspace
• Use and/or knowledge of computer forensic tools including Logicube Falcon, Velociraptor, EnCase, FTK, Nuix, X-Ways, Axiom, IEF, Blacklight, Kali, WinFE, DEFT, Cellebrite and XRY
• Ability to use PowerShell, Bash, Python, SQL and data wrangling for log analysis
• Demonstrable technical computer forensics experience and awareness of recognised international standards
• Understanding of NPCC, NIST and ISO17025 best-practice procedures and evidence handling
• Understanding of MITRE ATT&CK, Cyber Kill Chain, network topology and EDR solutions
• Excellent written and verbal communication skills
• Educated to BSc in IT or similar technical degree, or related experience
• Knowledge of Microsoft, Apple and Linux products
• Awareness and understanding of computer networks and infrastructure
• Availability for international travel up to 25% of the time
• Preferred: experience with mobile device acquisitions
• Preferred: broad programming/scripting skills
• Preferred: excellent presentation skills
• Preferred: client-facing communications and consultative service experience
• Preferred: experience writing expert reports and witness statements
• Preferred: BSc/MSc or equivalent in Computer Forensics
• Preferred: forensic accreditation such as EnCE, ACE or GCFE
• Preferred: previous internship or work experience in a DFIR/Security Operations role

Core Competencies

Demonstrates expertise in Digital Forensics, Incident Response, and Cyber Security, with a strong ability to conduct forensic analysis and preserve digital evidence. Proficient in using industry-standard tools and techniques while ensuring compliance with international standards and evidential requirements.

Highest-signal resume keywords

• Digital Forensics
• Incident Response
• Forensic Data Acquisition
• Microsoft 365
• Cyber Security

Hard Skills

• Forensic Analysis
• Data Wrangling
• Log Analysis
• PowerShell
• Bash
• Python
• SQL
• Operating Systems
• Networking Systems
• Digital Evidence Preservation

Soft Skills

• Excellent Communication Skills
• Client-Facing Experience
• Presentation Skills

Certifications & Qualifications

• EnCE
• ACE
• GCFE

Industry Keywords

• Cyber Kill Chain
• MITRE ATT&CK
• NIST
• ISO17025
• NPCC
• EDiscovery
• Crisis Management
• Data Breaches
• Digital Investigations
• Forensic Accreditation

Tools & Technologies

• Logicube Falcon
• Velociraptor
• EnCase
• FTK
• Nuix
• X-Ways
• Axiom
• Kali
• Cellebrite
• XRY