You’ll be the technical lead on critical cyber incidents for a global risk consultancy. You’ll run forensic investigations to an evidential standard for law firms, major multinationals and government clients. It’s a senior role with real influence on where the forensic and incident response capability goes next across EMEA.
The essentials
- Location: remote, UK-based
- On-call for incidents that come up at short notice, with international travel up to 25% of the time
- Level: Senior Consultant, reporting to an Associate Director or Director of DFIR
What you’ll actually do
- Act as technical lead on critical incidents, delivering quality-assured forensic incident management.
- Carry out forensic collections, investigations and analysis, keeping detailed contemporaneous notes so the work stands up to evidential scrutiny.
- Produce written analyses, reports and presentations for audiences with very different levels of technical knowledge.
- Work with cyber response, investigations and technical consulting teams across regions.
- Coach and develop other members of the team.
- Turn enquiries into proposals and support business development.
What you’ll need
- Experience leading cyber incidents that needed a forensic response.
- Strong computer forensics skills, with evidence handling to recognised best practice such as NPCC, NIST or SANS.
- Deep knowledge of Windows and Linux, on-premises and in the cloud, including Microsoft 365, Azure and AWS.
- Scripting and data skills for log analysis, such as PowerShell, Bash, Python or SQL.
- Confidence handling clients in crisis situations, with clear written and spoken communication.
- Experience scoping work, including estimates, project plans and proposals.
Nice to have:
- Experience with forensic tools such as EnCase, Nuix, Axiom or BlackBag.
- Certifications such as EnCE, GCFA or CISSP.
- An understanding of the EDRM.
What’s in it for you
- Remote working from anywhere in the UK.
- Direct responsibility and a say in the direction of the EMEA forensic and IR practice.
- Varied work across law firms, multinationals and government clients.
- Close links with eDiscovery, investigations and data analytics teams, broadening your exposure.
Senior DFIR Consultant employer: LT Harper Group
As a Senior Security Engineer at our specialist Microsoft security partner, you'll thrive in a dynamic and supportive work culture that prioritises employee growth and development. With a hybrid working model that allows for flexibility and a focus on continuous training, you will have the opportunity to work across multiple enterprise environments while collaborating with a talented team in London. Join us to make a meaningful impact in the cybersecurity landscape while enjoying the unique advantages of a forward-thinking organisation.
