Senior DFIR Consultant & Incident Response Lead

NCC Group; Netherlands; Remote; EUR 90,000 - 120,000; Full time

Job summary

NCC Group is seeking a Principal Consultant in DFIR to manage and service clients in the Digital Forensics and Incident Response space. The role focuses on analysis, response to security incidents, and mentoring a team within a dynamic environment.

Travel and leadership opportunities may be involved as part of delivering high-quality investigations and client outcomes, leveraging expertise across Windows/Linux forensics and cloud environments.

Qualifications

• Extensive experience in incident response, security operations or security consulting.
• Strong technical knowledge for cyber incident investigations (network, host forensics, malware).
• Significant Digital Forensics experience and case management familiarity.
• Ability to write scripts and develop tools to aid investigations.
• Proven ability to explain complex findings to non-technical stakeholders.

Responsibilities

• Lead and coordinate a DFIR team across engagements with clear communication.
• Respond to emergencies, assist mitigation and remediation activities.
• Maintain composure in high-pressure client scenarios and reports.
• Deliver high-quality technical investigations and recommendations.
• Mentor team members and review cross-service collaboration.

Skills

Incident response

Security operations

Digital forensics

Forensic analysis

Communication to executives

Education

CREST/ SANS security certs

Tools

Python

Perl

PowerShell

Bash

EDR/Log analysis tools

Job description

NCC Group is seeking a Principal Consultant in DFIR to manage and service clients in the Digital Forensics and Incident Response space. The role focuses on analysis, response to security incidents, and mentoring a team within a dynamic environment.

Travel and leadership opportunities may be involved as part of delivering high-quality investigations and client outcomes, leveraging expertise across Windows/Linux forensics and cloud environments.