Control Risks

Specialist risk consultancy ensuring secure operations

Digital Forensics and Incident Response Consultant

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeLondon, UK

About the Job

Requirements

Previous, demonstrable technical computer forensics experience for cyber incident response and investigations.
Thorough understanding of best-practice procedures (NPCC, NIST, ISO 17025), evidence handling, computer systems, and forensic tools.
Thorough understanding of the MITRE ATT&CK framework, the Cyber Kill Chain framework, network topology, and endpoint detection and response solutions.
Expert understanding of multiple operating systems, particularly Microsoft and Linux infrastructure and networking systems, both on-premise and in the cloud, as well as cloud services such as Microsoft 365, Azure, AWS, and Google Workspace.
Practical experience using common computer forensic tools for imaging, acquisition, and analysis, such as Logicube Falcon, Velociraptor, EnCase, FTK, Nuix, X-Ways, Axiom, IEF, BlackLight, Kali, WinFE, DEFT, Cellebrite, and XRY.
Expertise in PowerShell scripting, Bash scripting, Python, SQL, and data wrangling for log analysis.
Established track record performing forensic collections, participating in incident response and digital investigations, and maintaining detailed contemporaneous notes.
Experience producing expert reports and witness statements.
Experience performing mobile device forensics.
Experience providing client-facing communications and consultative services.
Excellent written and verbal communication skills.
Education to BSc level in IT or a similar technical degree, or related experience.
All-round competence using Microsoft, Apple, and Linux products.
In-depth understanding of computer networks and infrastructure.

Responsibilities

Provide forensic and incident response consultancy and expertise in data collections, investigations, analysis, and cyber security services to clients.
Support investigation teams across regions.
Deliver high-quality client work in a timely and efficient manner.
Ensure work is defensible and meets evidential standards as appropriate for the tasks.
Provide expert testimony in court as required.
Bring teams together through innovation, creativity, and initiative.
Anticipate client needs and identify ways to work efficiently.
Respond to potential enquiries and convert them into sales leads and proposals.
Engage in business development and marketing.
Be available for international travel up to 25% of the time.

Desired Qualifications

Broad understanding of programming and scripting skills.
Presentation skills.
Education to BSc or MSc level, or equivalent, in Computer Forensics.
Forensic accreditation, such as EnCE, ACE, or GCFE.

Consultant, Digital Forensics and Incident Response

Control Risks · London, United Kingdom (Hybrid) · Full-time · Posted 2026-09-02

Workplace: hybrid

Department: Tech Consulting

Description

We now have an exciting opportunity for a Consultant to join us in London. As the Consultant you will provide technical expertise and consultative solutions in the field of Digital Forensics, Incident Response, Cyber Security and eDiscovery for our clients. Our clients include Law Firms, Fortune 500 multi-nationals, and Government/Law Enforcement. You will be expected to be a technical lead on cases for our regional and international Discovery & Data Insights teams (DFIR/Legal Technologies/Data Analytics) as well as working closely with our Cyber Response and Crisis Management divisions as well as our Investigations teams. As the Consultant you will also support the business development effort for the department contributing subject matter expertise in articles, presentations and marketing campaigns.

Tasks and Responsibilities

Provide forensic/incident response consultancy and expertise in data collections, investigative/analysis & cyber security services to our clients
To support our Investigation teams across regions
To provide high quality deliverables to our clients in a timely and efficient manner
To ensure work is defensible and to an evidential standard as appropriate for tasks
To provide expert testimony in court as and when required
To be innovative and creative showing initiative in bringing teams together
To anticipate client needs and continually strive for ways to work efficiently
To respond to potential enquiries and convert these into sales leads and proposals
To actively engage in business development and marketing
Must be available for international travel (up to 25% of time)

Requirements

Essential

Previous, demonstrable, technical computer forensics experience for cyber incident response and investigations.
Thorough understanding of best practice procedures (NPCC, NIST, ISO17025) evidence handling, computer systems and tools of the trade
Thorough understanding of both the MITRE ATT&CK and Cyber Kill chain framework, network topology and EDR solutions
Previous expert understanding of multiple operating systems, particularly Microsoft and Linux infrastructure and networking systems, both on-premise and in the cloud, as well as dedicated cloud services such as Microsoft 365, Azure, AWS and Google Workspace
Previous experience and practical use of common computer forensic tools for imaging/acquisition and analysis (for example, Logicube Falcon, Velociraptor, EnCase, FTK, Nuix, X-Ways, Axiom, IEF, Blacklight, Kali, WinFE, DEFT, Cellebrite, XRY)
Expertise in PowerShell scripting, Bash scripts, Python, SQL and data wrangling for log analysis
Established track record for performing forensic collections, involvement in incident response and digital investigations alongside maintaining detailed contemporaneous notes
Production of expert reports and witness statements
Experience in performing mobile device forensics
Providing client-facing communications & consultative services

Preferred

Wide understanding of programming/scripting skills
Presentation skills

Essential

Excellent written/verbal communication skills
Educated to BSc in IT or similar technical degree (or related experience)
All-round skills and competence in using Microsoft/Apple/Linux products
In-depth understanding of computer networks and infrastructure

Preferred

Educated to BSc/MSc (or equivalent) in Computer Forensics
Forensic accreditation, for example EnCE, ACE, GCFE

Benefits

Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

If you require any reasonable adjustments to be made in order to participate fully in the interview process, please let us know and we will be happy to accommodate your needs.

Apply

Apply at Control Risks

About the Company

Control Risks

Specialist risk consultancy ensuring secure operations

Control Risks provides specialist risk consultancy that helps organisations become secure, compliant and resilient in a world of changing risks. It works across disciplines, technologies and geographies, delivering insight and intelligence to help clients focus resources, prepare for crises, resolve issues, and realise opportunities. Its approach emphasizes turning uncertainty into guidance and gives leaders reassurance from the boardroom to remote locations. Compared with competitors, it combines broad, cross-disciplinary risk expertise with global reach and actionable insights to bring order to chaos. The company’s goal is to help clients succeed by enabling sensible risk-taking and sustainable growth.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: London, United Kingdom
Founded: 1975

Recently Posted Jobs

Explore more opportunities at Control Risks

See more jobs