Associate Director, Digital Forensics and Incident Response

We now have an exciting opportunity for an Associate Director to join our Digital Forensics and Incident Response (DFIR) team in London. As the senior member of the EMEA DFIR team with deep digital forensic experience, you will be integral to the wider EMEA practice, and part of a global practice offering, influencing the direction of our forensic technology and digital forensics incident response capability. The Discovery and Data Insights department is the hub of all technical consulting, providing digital forensics and incident response solutions for cyber response investigations, digital forensic investigations, eDiscovery, and data analytics. Our clients include law firms and Fortune 500 multinationals worldwide.

Day-to-day, you will manage and execute matters on short notice, supporting crises and deploying the team as needed. As the technical lead, you will guide engagements, provide direction, and ensure high-quality, responsive forensic incident management. You will also engage across the business to leverage technology consulting for business development and go-to-market strategies, increasing the team’s visibility and capability through thought leadership, white papers, technical demonstrations, and collaborative client meetings. Your role will be key to our growth and success in the region.

• Manage and provide forensic incident response consultancy, including scoping data estates, data collection, and investigative analysis for clients.
• Support adjacent divisions such as Digital Risks, Investigations, and Technology Consulting across regions.
• Deliver high-quality, timely, and efficient results to clients.
• Ensure work is defensible and meets evidential standards as appropriate.
• Show innovation and initiative by fostering teamwork and creative problem-solving.
• Anticipate client needs and improve work efficiency continually.
• Respond to inquiries, converting them into opportunities, sales leads, and proposals.
• Lead business development and marketing efforts across Discovery and Data Insights, especially in Cyber, Investigations, and Forensic Accounting.
• Willingness and flexibility to travel internationally.

• Extensive professional and technology experience in digital forensics, cyber investigations, financial crime, or compliance.
• Proven knowledge of cyber incident response, forensic investigations, and best practices (MITRE ATT&CK, NPCC, NIST, SANS).
• Expertise in multiple OS and infrastructure, including Microsoft, Linux, cloud services (Azure, Google Workspace, AWS).
• Proficiency in PowerShell, Bash, Python, SQL, and log analysis.
• Experience with forensic software tools (X-Ways, EnCase, Nuix, Axiom, Cellebrite) and open-source tools (Velociraptor).
• Track record in forensic collections, incident response, and digital investigations with detailed documentation.
• Ability to produce written analyses, reports, and presentations.
• Excellent communication skills for diverse audiences.
• Experience managing client expectations and project lifecycles.
• Ability to identify opportunities for additional services post-breach/remediation.
• Strong interpersonal skills and team collaboration.
• Experience in creating project estimates, plans, proposals, and agreements.
• Leadership skills to manage and develop teams.
• Ability to work under pressure, meet deadlines, and handle multiple tasks.

• Knowledge of programming/scripting.

We offer a competitive compensation and benefits package, including a discretionary global bonus scheme, supporting hybrid and flexible working arrangements. We are committed to equal opportunity employment, encouraging applicants from diverse backgrounds to apply.