Overview
The European (EMEA) FTI Cybersecurity team is a dynamic and skill-diverse group driven to empower our clients to operate in a secure manner. Our team includes professionals from senior national security, Big Four consultancy, military engineering, digital forensics, corporate cybersecurity advisory and academia. We respond to clients in distress after cyber-attacks and cyber-enabled frauds, and also help proactively identify critical security gaps. We operate as one global cybersecurity team with collaboration across our business units and geographies. As a relatively new team within FTI Consulting, we pursue an entrepreneurial spirit, encourage ownership, foster inclusivity and respect, and offer flexible/remote working where possible. We invest in continuous professional development and value diversity of opinion and background. This role includes responsibilities and growth opportunities within a supportive environment.
What You'll Do
- Perform a wide range of cybersecurity engagements in a fast-paced, deadline-sensitive environment; summarize results accurately and concisely in written reports for clients including top-tier law firms, financial institutions, and corporations; manage consultants on engagements; and provide oral briefings to clients when appropriate.
- Participate in assessments of threats, vulnerabilities, and risks, applying technical skills and critical thinking.
- Collaboratively define cyber strategies and transformation plans for clients.
- Identify red flags, validate sources, and judge the completeness and accuracy of information (especially during M&A cyber due diligence).
- Utilize threat intelligence to identify, contextualize and analyze emerging threats, vulnerabilities, and risks to clients.
- Develop and innovate technologies and solutions to assess cybersecurity maturity and risks.
- Conduct external exposure and threat intelligence assessments using subscription databases and open-source tools to identify client attack surfaces and threat profiles.
- Maintain current knowledge of industry trends, threats, methodologies, and core technologies to meet client needs and provide appropriate advice and recommendations.
- Act as a coach and mentor for readiness work and provide support and training materials to others across the global team.
- Develop new tools to expand readiness methodologies, approaches, and offerings.
- Assist leadership in expanding the portfolio of services and improving efficiency and consistency of service delivery.
How You'll Grow
We are committed to investing in your professional development with programs focused on leadership and growth. You will have on-the-job learning, self-guided courses and certifications, and a dedicated coach for mentoring and career development. We offer tailored programs for professional milestones and a focus on wellbeing, including market-competitive benefits (pension and 15 flexible benefits), wellness, recognition, volunteering initiatives, and flexible/hybrid working arrangements.
Qualifications
- A highly analytical mindset with the ability to translate abstract problems into solutions.
- Critical thinking and a logical approach to analysis and decision making.
- A desire to innovate and improve existing solutions.
- Ability to distill complex technical findings into clear, actionable insights for technical and business stakeholders.
- Excellent oral and written communication skills.
- Strong interpersonal skills, team spirit and a collaborative ethos.
- Attention to detail and a commitment to high-quality presentation.
- Informed perspective on the UK cyber threat landscape and a commitment to continuous learning.
- Relevant experience within the cybersecurity industry.
- Bachelor’s degree in a technical or scientific discipline is preferred or equivalent experience.
- Strong experience with Excel, PowerPoint, and other Office applications.
- Understanding of cybersecurity control and risk assessment frameworks (e.g., NIST CSF, CIS, NIST 800-53, ISO 27001) and their differences.
- Awareness of regulatory landscapes and data privacy, cybersecurity, and operational resilience regulations.
- Familiarity with threat intelligence tools, frameworks, and OSINT was preferred.
- Relevant cybersecurity certifications (e.g., CompTIA Security+, CISSP, ISO, CISM, OSCP, etc.).