DFIR Consultant

The Role

You act as technical lead on forensic cases spanning digital forensics, incident response and investigations. Duties include forensic collections and analysis across Windows, Linux, Apple and cloud platforms, responding to cyber incidents, producing expert reports and witness statements, and giving court testimony when required.

Skills & Experience

Requires hands-on computer and mobile forensics, evidence handling standards (NPCC, NIST, ISO 17025), MITRE ATT&CK knowledge, and tools such as Velociraptor, EnCase, FTK, X-Ways, Axiom and Cellebrite. Scripting skills in PowerShell, Python, Bash and SQL, plus report-writing experience and a relevant technical degree are expected.

Who It Suits

Suited to an experienced forensic investigator comfortable leading casework, writing defensible expert reports, and travelling internationally, who wants varied litigation and investigation work within a collaborative consultancy team.