Global DFIR Consultant — Digital Forensics & Incident Response

Control-Risks; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

Global bonus scheme

Career development and training

Job summary

Control Risks is seeking a Consultant in London to lead digital forensics, incident response, cyber security, and eDiscovery engagements for diverse clients including law firms, multinationals, and government bodies. You will guide cases for DFIR/Legal Technologies teams, collaborate with Cyber Response and Investigations units, and contribute to client-facing content and campaigns.

The role requires strong technical leadership, cross-functional collaboration, and willingness to travel

Qualifications

• Demonstrable forensic experience in cyber incident response and investigations.
• Familiarity with NPCC, NIST, ISO17025 practices for evidence handling.
• Experience across MS Windows, Linux, cloud services (M365, Azure, AWS, Google Workspace).
• Experience with mobile device forensics and producing expert reports.

Responsibilities

• Provide forensic/IR consultancy and expertise in data collections and analysis for clients.
• Support Investigation teams across regions.
• Deliver high-quality, defensible work in a timely manner.
• Provide expert testimony in court when required.
• Engage in business development and marketing activities.

Skills

Forensics expertise

Incident response

PowerShell

Python

SQL

Data wrangling

Expert testimony

Client communication

Education

BSc in IT or related field

BSc/MSc in Computer Forensics

Tools

Logicube Falcon

Velociraptor

EnCase

FTK

Nuix

X-Ways

Axiom

IEF

Blacklight

Kali

WinFE

DEFT

Cellebrite

XRY

Job description

Control Risks is seeking a Consultant in London to lead digital forensics, incident response, cyber security, and eDiscovery engagements for diverse clients including law firms, multinationals, and government bodies. You will guide cases for DFIR/Legal Technologies teams, collaborate with Cyber Response and Investigations units, and contribute to client-facing content and campaigns.

The role requires strong technical leadership, cross-functional collaboration, and willingness to travel