Digital Forensics and Incident Response: Consultant

Control Risks; London; On-site; GBP 50,000 - 90,000; Full time

Job summary

An established industry player is seeking a Consultant for their Discovery and Data Insights team in London. This role offers the opportunity to provide technical expertise in Digital Forensics, Incident Response, and Cyber Security. You will be a key player in supporting clients, including Law Firms and Fortune 500 companies, while also contributing to business development efforts. The position requires a hybrid work model, offering flexibility while emphasizing in-person collaboration. If you have a passion for technology and a strong background in forensics, this is a chance to make a significant impact in a dynamic environment.

Benefits

Global bonus scheme

Hybrid working arrangements

Flexible working options

Equal opportunities employer

Qualifications

• Experience in digital forensics and incident response is essential.
• Excellent written and verbal communication skills are required.
• Knowledge of best practice procedures for evidence handling.

Responsibilities

• Provide forensic consultancy and expertise in data collections.
• Support investigation teams across regions and deliver timely results.
• Engage in business development and convert inquiries into sales leads.

Skills

Digital Forensics

Incident Response

Cyber Security

Data Analysis

PowerShell Scripting

Python

SQL

Education

BSc in IT

BSc/MSc in Computer Forensics

Tools

EnCase

FTK

Nuix

Kali

Cellebrite

Job description

We're now seeking a Consultant to join our Discovery and Data Insights team in London. In this role, you will provide technical expertise and consultative solutions in Digital Forensics, Incident Response, Cyber Security, and eDiscovery for our clients. Our clients include Law Firms, Fortune 500 multi-nationals, and Government/Law Enforcement.

You will be expected to be a technical lead on cases for our regional and international teams (DFIR/Legal Technologies/Data Analytics) and work closely with our Cyber Response, Crisis Management, and Investigations divisions. Additionally, you will support business development through articles, presentations, and marketing campaigns. This role requires working at our London office at least three days a week (hybrid) with on-call rotations that may include weekends/evenings. Experience in digital forensics and incident response is essential.

Responsibilities

1. Provide forensic/incident response consultancy and expertise in data collection, investigation, analysis, and cybersecurity services.
2. Support Investigation teams across regions.
3. Deliver high-quality, timely, and efficient results to clients.
4. Ensure work is defensible and meets evidential standards.
5. Provide expert testimony in court as required.
6. Show initiative in bringing teams together through innovation and creativity.
7. Anticipate client needs and improve work efficiency.
8. Respond to inquiries, converting them into sales leads and proposals.
9. Engage actively in business development and marketing.
10. Some international travel may be required.

Knowledge and Experience

Essential

• Proven technical experience in computer forensics for cyber incident response and investigations.
• Understanding of best practices (NPCC, NIST, ISO17025) in evidence handling, systems, and tools.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, network topology, and EDR solutions.
• Expertise in multiple operating systems (Microsoft, Linux), cloud services (Microsoft 365, Azure, AWS, Google Workspace), and on-premise infrastructure.
• Practical use of forensic tools (e.g., EnCase, FTK, Cellebrite, XRY) for imaging and analysis.
• Skills in PowerShell, Bash, Python, SQL, and log analysis for data wrangling.
• Experience in forensic collections, incident response, investigations, and maintaining detailed notes.
• Ability to produce expert reports and witness statements.
• Experience in mobile device forensics.
• Strong client communication and consultative skills.

Preferred

• Knowledge of programming/scripting.
• Presentation skills.

Qualifications and Skills

Essential

• Excellent written and verbal communication skills.
• BSc in IT or related technical degree (or equivalent experience).
• Proficiency with Microsoft, Apple, and Linux products.
• Deep understanding of computer networks and infrastructure.

Preferred

• BSc/MSc in Computer Forensics or related.
• Forensic certifications (e.g., EnCE, ACE, GCFE).

Control Risks offers a competitive compensation and benefits package, including a global bonus scheme based on performance. We support hybrid working arrangements and are committed to diversity and equal opportunity in our recruitment process.