F

FTI Consulting

Global advisory for restructurings, investigations

Cybersecurity Consultant

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeMadrid, SpainNo salary listed

About the Job

Requirements

  • A bachelor's degree in Computer Science, Cybersecurity, Digital Forensics or a related discipline, or equivalent practical experience.
  • Professional experience in Digital Forensics and Incident Response (DFIR), cybersecurity incident response, digital investigations or a closely related technical role.
  • Hands-on experience investigating and responding to cybersecurity incidents, including identifying and analyzing indicators of compromise.
  • Practical experience acquiring, preserving and analyzing forensic images and artifacts from Windows, Linux, macOS and/or mobile devices.
  • Familiarity with digital forensic and incident response tools such as FTK Imager, EnCase, Magnet AXIOM, Cellebrite and Volatility.
  • Experience analyzing endpoint and network telemetry using tools such as Wireshark, Splunk, ELK or similar platforms.
  • Familiarity with EDR solutions such as SentinelOne, CrowdStrike or Carbon Black.
  • Understanding of evidence preservation, forensic documentation and chain-of-custody procedures.
  • Knowledge of common attack techniques, threat intelligence, data exfiltration and data loss prevention concepts.
  • Familiarity with cybersecurity frameworks, standards and regulations such as NIST, ISO 27001 and GDPR.
  • Strong analytical, investigative and problem-solving skills, with the ability to document technical findings clearly.
  • Excellent written and verbal communication skills in English and Spanish.
  • Ability to work in a fast-paced, client-focused environment and manage competing priorities.
  • Willingness to travel when required.

Responsibilities

  • Support and execute cybersecurity engagements involving incident response, digital forensics and cyber investigations.
  • Assist in investigating security incidents, including ransomware attacks, data breaches, unauthorized access and suspected data exfiltration.
  • Acquire, preserve and analyze digital evidence from endpoints, servers, mobile devices and other relevant systems.
  • Conduct forensic analysis across Windows, Linux, macOS and mobile operating systems to identify indicators of compromise, reconstruct attacker activity and establish incident timelines.
  • Analyze endpoint, network and system artifacts to determine the nature, scope and impact of cybersecurity incidents.
  • Use EDR, SIEM and digital forensic tools to investigate suspicious activity, identify threats and support incident containment and remediation.
  • Apply established forensic methodologies and maintain appropriate evidence-handling procedures, including chain of custody.
  • Prepare clear, accurate and well-structured technical reports, documenting findings and translating complex technical information into actionable conclusions.
  • Contribute to client presentations and communicate findings and recommendations to technical and non-technical stakeholders.
  • Support cybersecurity assessments and the development of investigative approaches, technical methodologies and incident response procedures.
  • Stay up to date with emerging cyber threats, attack techniques, forensic methodologies and industry best practices.
  • Collaborate with colleagues across the global Cybersecurity practice and other FTI Consulting service lines.
  • Travel to client sites and FTI Consulting offices when required.

Desired Qualifications

  • Relevant digital forensics, incident response or cybersecurity certifications, such as GCFE, GCFA, GCIH, GNFA or equivalent.
  • Experience investigating ransomware incidents, business email compromise, insider threats or data breaches.
  • Familiarity with memory forensics, disk forensics, timeline analysis, malware triage and threat hunting.
  • Scripting skills in Python, PowerShell or Bash.
  • Knowledge of MITRE ATT&CK and common adversary tactics, techniques and procedures.
  • Experience supporting incident response engagements in a professional services, consulting or corporate environment.
  • Italian and/or Portuguese language skills.
  • Willingness to pursue additional professional certifications and continuously develop technical expertise.

About the Company

FTI Consulting

Global advisory for restructurings, investigations

FTI Consulting is a global business advisory firm that helps organizations manage change, mitigate risk, and resolve disputes in high-stakes settings like restructurings, litigation, investigations, antitrust reviews, and reputational crises. It offers five segments: Corporate Finance & Restructuring; Forensic and Litigation Consulting; Economic Consulting (Compass Lexecon); Technology for e-discovery and information governance; and Strategic Communications for reputation and public affairs. The firm's services combine finance, investigations, economics, technology, and communications to provide end-to-end support, from turnarounds to expert testimony and risk management. Its goal is to help clients navigate complex changes, reduce risk, and resolve disputes across various industries.

Company size
10,001+
Company stage
IPO
Headquarters
Baltimore, MD
Founded
1982

Recently Posted Jobs

Explore more opportunities at FTI Consulting

See more jobs