Senior DFIR Consultant — Incident Response Leader

Fox-IT; Rijswijk; On-site; EUR 120,000 - 170,000; Full time

Job summary

NCC Group in the Netherlands is seeking a Principal DFIR Consultant to lead and mentor a seasoned DFIR team. You will orchestrate investigations, coordinate incident response and deliver in-depth technical analyses for diverse clients, including executive stakeholders.

The role emphasizes deep forensics, threat intelligence, scripting for automation, and cross-functional collaboration in a fast-paced, 24x7 environment.

Qualifications

• Ample experience in incident response, security operations or strategic security consulting.
• Significant experience in a Digital Forensics environment.
• Experienced in the use of a case management system.
• Proficient in host/network/log analysis and malware triage.

Responsibilities

• Manage and coordinate a cohesive DFIR team across engagements.
• Respond to emergency incidents with mitigation and remediation actions.
• Provide high-quality technical investigations to clients.
• Collaborate to identify and document security incidents.
• Conduct intelligence-driven investigative analysis.
• Discuss cyber threat posture and perform assessments with clients.

Skills

Incident response

Security operations

Digital forensics

Scripting

Client communication

Team leadership

Threat hunting

Analytical thinking

Executive level briefing

Education

CREST CPIA/CRIA/CCNIA/CCHIA or SANS GCFA/GNFA/GCIH

Tools

Azure

M365

AWS

GCP

Case management system

Job description

NCC Group in the Netherlands is seeking a Principal DFIR Consultant to lead and mentor a seasoned DFIR team. You will orchestrate investigations, coordinate incident response and deliver in-depth technical analyses for diverse clients, including executive stakeholders.

The role emphasizes deep forensics, threat intelligence, scripting for automation, and cross-functional collaboration in a fast-paced, 24x7 environment.