Digital Forensics and Incident Response: Consultant

We're now seeking a Consultant to join our Discovery and Data Insights team in London. In this role, you will provide technical expertise and consultative solutions in Digital Forensics, Incident Response, Cyber Security, and eDiscovery for our clients. Our clients include Law Firms, Fortune 500 multi-nationals, and Government/Law Enforcement.

You will be expected to be a technical lead on cases for our regional and international teams (DFIR/Legal Technologies/Data Analytics) and work closely with our Cyber Response, Crisis Management, and Investigations divisions. Additionally, you will support business development through articles, presentations, and marketing campaigns. This role requires working at our London office at least three days a week (hybrid) with on-call rotations that may include weekends/evenings. Experience in digital forensics and incident response is essential.

Responsibilities

1. Provide forensic/incident response consultancy and expertise in data collection, investigation, analysis, and cybersecurity services.
2. Support Investigation teams across regions.
3. Deliver high-quality, timely, and efficient results to clients.
4. Ensure work is defensible and meets evidential standards.
5. Provide expert testimony in court as required.
6. Show initiative in bringing teams together through innovation and creativity.
7. Anticipate client needs and improve work efficiency.
8. Respond to inquiries, converting them into sales leads and proposals.
9. Engage actively in business development and marketing.
10. Some international travel may be required.

Knowledge and Experience Essential

• Proven technical experience in computer forensics for cyber incident response and investigations.
• Understanding of best practices (NPCC, NIST, ISO17025) in evidence handling, systems, and tools.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, network topology, and EDR solutions.
• Expertise in multiple operating systems (Microsoft, Linux), cloud services (Microsoft 365, Azure, AWS, Google Workspace), and on-premise infrastructure.
• Practical use of forensic tools (e.g., EnCase, FTK, Cellebrite, XRY) for imaging and analysis.
• Skills in PowerShell, Bash, Python, SQL, and log analysis for data wrangling.
• Experience in forensic collections, incident response, investigations, and maintaining detailed notes.
• Ability to produce expert reports and witness statements.
• Experience in mobile device forensics.
• Strong client communication and consultative skills.

Preferred

• Knowledge of programming/scripting.
• Presentation skills.

Qualifications and Skills Essential

• Excellent written and verbal communication skills.
• BSc in IT or related technical degree (or equivalent experience).
• Proficiency with Microsoft, Apple, and Linux products.
• Deep understanding of computer networks and infrastructure.

Preferred

• BSc/MSc in Computer Forensics or related.
• Forensic certifications (e.g., EnCE, ACE, GCFE).

Control Risks offers a competitive compensation and benefits package, including a global bonus scheme based on performance. We support hybrid working arrangements and are committed to diversity and equal opportunity in our recruitment process.