DFIR Consultant

LT Harper Recruitment Group; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Forensic Focus in London seeks a technical lead on digital forensics, incident response and investigations. You will oversee collections and analysis across Windows, Linux, macOS and cloud, respond to cyber incidents, and produce expert reports and witness statements.

The role includes court testimony when required and international travel as part of a collaborative consultancy team.

Qualifications

• Hands-on computer and mobile forensics experience.
• Familiar with evidence handling standards (NPCC, NIST, ISO 17025).
• MITRE ATT&CK knowledge.
• Strong scripting skills (PowerShell, Python, Bash, SQL).
• Relevant technical degree.

Responsibilities

• Lead forensic investigations and casework.
• Perform collections and analysis across Windows, Linux, macOS and cloud platforms.
• Prepare expert reports and witness statements.
• Provide court testimony when required.
• Travel internationally for assignments.

Skills

Computer forensics

Mobile forensics

MITRE ATT&CK knowledge

Report writing

Scripting (PowerShell, Python, Bash, &

Education

Technical degree

Tools

Velociraptor

EnCase

FTK

X-Ways

Axiom

Cellebrite

Job description

The Role

You act as technical lead on forensic cases spanning digital forensics, incident response and investigations. Duties include forensic collections and analysis across Windows, Linux, Apple and cloud platforms, responding to cyber incidents, producing expert reports and witness statements, and giving court testimony when required.

Skills & Experience

Requires hands-on computer and mobile forensics, evidence handling standards (NPCC, NIST, ISO 17025), MITRE ATT&CK knowledge, and tools such as Velociraptor, EnCase, FTK, X-Ways, Axiom and Cellebrite. Scripting skills in PowerShell, Python, Bash and SQL, plus report-writing experience and a relevant technical degree are expected.

Who It Suits

Suited to an experienced forensic investigator comfortable leading casework, writing defensible expert reports, and travelling internationally, who wants varied litigation and investigation work within a collaborative consultancy team.