About this role
Salary: £26,000 - 61,000 per year
Requirements: Bachelors degree or equivalent experience.Experience conducting digital forensics or incident response, or a similar role.Specialized experience in cyber incident response and cyber incident management.Understanding of frameworks and standards such as PCI, HIPAA, GDPR, CCPA, NERC CIP, ISO and NIST.Experience conducting cyber framework assessments, or the ability to learn.Technical hands-on experience capturing and analyzing forensic images from systems including Windows, Linux, OSX and smartphones.Experience using tools such as Volatility, FTK Imager, Cellebrite, WireShark, EnCase, Axiom, Splunk and ELK.Experience documenting technical details gathered from forensics analysis into incident reports for wider consumption.Experience using EDR tools such as SentinelOne and Carbon Black.Knowledge of chain of custody procedures.Understanding of data loss and data theft prevention concepts and technologies.Threat modeling fundamentals.Analytical ability, including identifying red flags, validating sources and making judgment calls about the completeness and accuracy of open-source information.Experience developing investigative plans and strategies for engagements.Strategic planning and resourcefulness.Certifications related to DIFR, such as GCFE, GCFA, GREM or GNFA, or a willingness to obtain them.Experience in online learning such as HackTheBox Blue Team labs.Scripting skills in Python, Bash and PowerShell are a plus. Responsibilities: Perform a wide range of cybersecurity engagements in a fast-paced, deadline-sensitive environment.Summarize results accurately and concisely in written reports for a sophisticated client base.Manage consultants on engagements involving teams of investigative researchers.Provide oral reports to clients when appropriate.Assist leadership in developing strategies to expand the portfolio of services offered and improve the efficiency and consistency of service delivery.Maintain current knowledge of industry trends, threats, methodologies and core technologies to assimilate client needs and design appropriate technical solutions.Lead assessment of current threat identification techniques and development of new methodologies and frameworks.Conduct incident analysis using analytical skills and advanced knowledge of cybersecurity, digital forensics and incident response.Assess client cybersecurity postures against industry standard best practices and frameworks.Lead modification and enhancement of proposals.Travel to clients and our offices as required. Technologies: BashELKIncident ManagementLinuxPowerShellPythonSecuritySplunkWindowsSupport More:
We are FTI Consulting, the leading global expert firm for organizations facing crisis and transformation. We work with top multinational corporations, law firms, banks and private equity firms on their most important issues, helping deliver impact that makes a difference. Our team supports complex cyber security challenges for major brands, where discretion, confidentiality, responsiveness and expert-driven impact are central to how we operate. We work collaboratively across a global cybersecurity P&L and with teams across the business, including Strategic Communications, Technology and Data Science. This role is part of our EMEA cybersecurity practice growth journey, offering a start-up environment within an established corporate setting. We offer an open, collaborative culture that values diversity, recognition and professional development, with continuous learning, on-the-job development, certifications, coaching and tailored growth programs. The role is based in London, United Kingdom and is full time.
last updated 36 week of 2026