Senior DFIR Consultant: Incident Response & Forensics

Jobtailor; Rijswijk; On-site; EUR 90,000 - 140,000; Full time

Job summary

NCC Group is seeking a senior Digital Forensics and Incident Response lead to manage client engagements across security incidents and investigations in a fast-paced environment.

You will analyze complex data, mentor teams, and coordinate multi-disciplinary responses to protect clients. The role emphasizes clear communication with executives and delivering high-quality technical findings.

Qualifications

• Ample experience in incident response, security operations or security consulting.
• Strong knowledge supporting cyber incident response activities.
• Understanding of network analysis, host investigation and forensics, and malware analysis.
• Significant DF experience.
• Experience using a case management system.
• Advanced host, network and cloud forensics.
• Log analysis and malware triage.
• Experience evaluating client security controls, architecture and operations.
• Experience crafting scripts using Perl, Python, PowerShell and Bash.
• Experience triaging Windows and Linux hosts.
• Experience with network traffic analysis.
• Experience with log data analysis.
• Ability to explain technical output to non-technical audiences, including executives.
• Experience in 24x7 environments and turns.
• Ability to lead large projects and reporting.
• Strong interpersonal and communication skills including report-writing.
• Identify attacker TTPs and develop indicators of compromise.
• CREST/SANS certifications preferred.

Responsibilities

• Manage and service NCC Group clients within Digital Forensics and Incident Response.
• Participate in analysis and response to security incidents and events.
• Support clients through deep technical, detail-oriented analysis.
• Mentor and lead team members during engagements.
• Coordinate cohesive teams during technical engagements.
• Respond to emergency incidents including mitigation and remediation.
• Maintain composure in client incident-management scenarios.
• Provide clients with high-quality technical investigations.
• Collaborate on identifying, resolving and documenting security incidents.
• Conduct intelligence-driven investigative analysis.
• Discuss broader technology and security posture with clients for Cyber Threat assessments.
• Support internal cross-service collaboration, reviews and efficiency improvements.

Skills

Incident Response

Digital Forensics

Malware Analysis

Python Scripting

Cloud Forensics

Log Analysis

Windows Host Triage

Linux Host Triage

Network Analysis

PowerShell

Education

CREST CPIA

CREST CRIA

CREST CCNIA

CREST CCHIA

SANS GCFA

SANS GNFA

SANS GCIH

Tools

Perl

Python

PowerShell

Bash

Case Management System

Azure

M365

AWS

GCP

Job description

NCC Group is seeking a senior Digital Forensics and Incident Response lead to manage client engagements across security incidents and investigations in a fast-paced environment.

You will analyze complex data, mentor teams, and coordinate multi-disciplinary responses to protect clients. The role emphasizes clear communication with executives and delivering high-quality technical findings.