Associate Consultant, Digital Forensics, Incident Response

Responsibilities

• Provide technical expertise and consultative solutions in Digital Forensics, Incident Response, Cyber Security and eDiscovery
• Serve law firms, Fortune 500 multinationals and government/law-enforcement clients
• Preserve digital data and conduct forensic analysis of digital evidence
• Prepare reporting for regional and international Discovery & Data Insights teams
• Collaborate with Cyber Response, Crisis Management and Investigations teams
• Support experienced professionals in investigating data breaches and security incidents
• Collect and preserve digital data using industry-standard tools and techniques
• Assist with forensic analysis and cyber security services
• Support Investigation teams across all regions
• Deliver high-quality client deliverables in a timely and efficient manner
• Ensure work is defensible and meets evidential standards where appropriate
• Provide expert testimony in court when required
• Stay current with digital forensic techniques, tools and trends

Requirements

• Experience performing forensic data acquisitions and participating in digital investigations while maintaining detailed contemporaneous notes
• Understanding of multiple operating systems, especially Microsoft and Linux infrastructure and networking systems, on-premise and in the cloud
• Knowledge of Microsoft 365, Azure, AWS and Google Workspace
• Use and/or knowledge of computer forensic tools including Logicube Falcon, Velociraptor, EnCase, FTK, Nuix, X-Ways, Axiom, IEF, Blacklight, Kali, WinFE, DEFT, Cellebrite and XRY
• Ability to use PowerShell, Bash, Python, SQL and data wrangling for log analysis
• Demonstrable technical computer forensics experience and awareness of recognised international standards
• Understanding of NPCC, NIST and ISO17025 best-practice procedures and evidence handling
• Understanding of MITRE ATT&CK, Cyber Kill Chain, network topology and EDR solutions
• Excellent written and verbal communication skills
• Educated to BSc in IT or similar technical degree, or related experience
• Knowledge of Microsoft, Apple and Linux products
• Awareness and understanding of computer networks and infrastructure
• Availability for international travel up to 25% of the time
• Preferred: experience with mobile device acquisitions
• Preferred: broad programming/scripting skills
• Preferred: excellent presentation skills
• Preferred: client-facing communications and consultative service experience
• Preferred: experience writing expert reports and witness statements
• Preferred: BSc/MSc or equivalent in Computer Forensics
• Preferred: forensic accreditation such as EnCE, ACE or GCFE
• Preferred: previous internship or work experience in a DFIR/Security Operations role

Core Competencies

Demonstrates expertise in Digital Forensics, Incident Response, and Cyber Security, with a strong ability to conduct forensic analysis and preserve digital evidence. Proficient in using industry-standard tools and techniques while ensuring compliance with international standards and evidential requirements.

Highest-signal resume keywords

• Digital Forensics
• Incident Response
• Forensic Data Acquisition
• Microsoft 365
• Cyber Security

Hard Skills

• Forensic Analysis
• Data Wrangling
• Log Analysis
• PowerShell
• Bash
• Python
• SQL
• Operating Systems
• Networking Systems
• Digital Evidence Preservation

Soft Skills

• Excellent Communication Skills
• Client-Facing Experience
• Presentation Skills

Certifications & Qualifications

• EnCE
• ACE
• GCFE

Industry Keywords

• Cyber Kill Chain
• MITRE ATT&CK
• NIST
• ISO17025
• NPCC
• EDiscovery
• Crisis Management
• Data Breaches
• Digital Investigations
• Forensic Accreditation

Tools & Technologies

• Logicube Falcon
• Velociraptor
• EnCase
• FTK
• Nuix
• X-Ways
• Axiom
• Kali
• Cellebrite
• XRY