Staff DFIR Consultant

MVProfessionals; Utrecht; On-site; EUR 90,000 - 130,000; Full time

Job summary

Forensic Focus in the Netherlands seeks a senior DFIR consultant to lead end-to-end digital forensics investigations for incident response. You will analyze system artifacts, malware and logs to determine root cause and attack patterns, and produce forensic reports suitable for legal proceedings.

You will advise on containment, mentor junior analysts, and communicate complex findings clearly to non-technical stakeholders and management across the organization.

Qualifications

• 7+ years hands-on DFIR experience.
• Experience leading complex cases and investigations.
• Ability to produce forensic reports suitable for legal proceedings.
• Ability to communicate technical findings to non-technical stakeholders.

Responsibilities

• Lead end-to-end digital forensics investigations for incident response.
• Analyze system artifacts, malware and logs to determine root cause and attack patterns.
• Provide forensic reporting suitable for legal proceedings and containment guidance.
• Mentor junior analysts and guide case work.

Skills

DFIR experience

Leadership

Mentoring

Communication

Education

GCIH

GCIA

GREM

EnCE

Tools

EnCase

FTK

Volatility

Wireshark

Velociraptor

Job description

The Role

This senior consultant leads end-to-end digital forensics investigations supporting incident response, analysing system artifacts, malware and logs to determine root cause and attack patterns. Responsibilities include forensic reporting suitable for legal proceedings, advising on containment, and mentoring junior analysts.

Skills & Experience

Requires 7+ years hands-on DFIR experience with tools such as EnCase, FTK, Volatility, Wireshark and Velociraptor, strong Windows/Linux knowledge, malware and memory forensics expertise, and certifications like GCIH, GCIA, GREM or EnCE preferred.

Who It Suits

Ideal for an experienced forensic investigator comfortable leading complex cases, mentoring junior staff, and communicating technical findings clearly to non-technical stakeholders and management.