Digital Forensic & Incident Response Consultant

Job Title: Digital Forensic and Incident Response Consultant

Department: EMEA

Location: Frankfurt, Germany

Job Description:

As a Digital Forensic and Incident Response Consultant at our global client, you will play a crucial role in providing technical expertise and consultative solutions in the field of Digital Forensics, Incident Response, Cyber Security, and eDiscovery for our diverse client base, including Law Firms, Fortune 500 multi-nationals, and Government/Law Enforcement agencies. You will serve as a technical lead on cases for our regional and international Discovery & Data Insights teams (DFIR/Legal Technologies/Data Analytics) and collaborate closely with our Cyber Response and Crisis Management divisions, as well as our Investigations teams. Additionally, you will support the business development effort for the department by contributing subject matter expertise in articles, presentations, and marketing campaigns.

Responsibilities:

1. Provide expert forensic/incident response consultancy and expertise in data collections, investigative/analysis, and cyber security services for our clients.
2. Collaborate with our Investigations teams across regions to ensure seamless operations.
3. Deliver high-quality work to our clients in a timely and efficient manner, ensuring that the work is defensible and meets evidential standards.
4. Provide expert testimony in court when required.
5. Demonstrate innovation and creativity by taking initiative to bring teams together.
6. Anticipate client needs and continually seek ways to work more efficiently.
7. Respond to potential inquiries and convert them into sales leads and proposals.
8. Actively engage in business development and marketing efforts.
9. Be available for international travel (up to 25% of the time).

Requirements:

Essential:

1. Demonstrable technical computer forensics experience in cyber incident response and investigations.
2. Thorough understanding of best practice procedures (NPCC, NIST, ISO17025), evidence handling, computer systems, and tools of the trade.
3. Thorough understanding of the MITRE ATT&CK and Cyber Kill Chain framework, network topology, and EDR solutions.
4. Expertise in multiple operating systems, particularly Microsoft and Linux infrastructure, as well as cloud services like Microsoft 365, Azure, AWS, and Google Workspace.
5. Practical use of common computer forensic tools for imaging and analysis.
6. Proficiency in PowerShell scripting, Bash scripts, Python, SQL, and data wrangling for log analysis.
7. Track record of performing forensic collections, incident response, and digital investigations while maintaining detailed contemporaneous notes.
8. Experience in mobile device forensics.
9. Ability to provide client-facing communications and consultative services.

Preferred:

1. Wide understanding of programming/scripting skills.
2. Strong presentation skills.

Qualifications and Specialist Skills:

Essential:

1. Excellent written and verbal communication skills.
2. Bachelor’s degree in IT or a similar technical field (or related experience).
3. Competence in using Microsoft/Apple/Linux products.
4. In-depth understanding of computer networks and infrastructure.

Preferred:

1. Bachelor’s or Master’s degree (or equivalent) in Computer Forensics.
2. Forensic accreditation, such as EnCE, ACE, GCFE.

#J-18808-Ljbffr