Associate Consultant, Digital Forensics and Incident Response

Description We now have an exciting opportunity for an Associate Consultant to join us in London. As an Associate Consultant you will provide technical expertise and consultative solutions in the field of Digital Forensics, Incident Response, Cyber Security and eDiscovery for our clients. Our clients include Law Firms, Fortune 500 multi-nationals, and Government/Law Enforcement. You will be responsible for the preservation of digital data, forensic analysis of digital evidence and providing reporting for our regional and international Discovery & Data Insights teams (DFIR/Legal Technologies/Data Analytics) as well as working closely with our Cyber Response and Crisis Management divisions as well as our Investigations teams.

As an Associate Consultant you will play a crucial role in supporting our team of experienced professionals in serving both internal and external clients through the investigation of data breaches and security incidents.

This is an excellent opportunity for a motivated individual with a passion for digital forensics to gain hands-on experience in the field of DFIR.Role tasks and responsibilities

To collect and preserve digital data using industry-standard tools and techniques

To assist with the provision of forensic analysis & cyber security services to our clients

To support our Investigation teams across all regions

To provide high quality deliverables to our clients in a timely and efficient manner

To ensure work is defensible and to an evidential standard as appropriate for tasks

To provide expert testimony in court as and when required

To be innovative and creative, showing initiative in delivering day to day duties

Must be available for international travel (up to 25% of time)
Stay up to date with the latest digital forensic techniques, tools and trends

Requirements Essential Experience  of performing forensic data acquisitions, involvement in digital investigations alongside maintaining detailed contemporaneous notes

Understanding and awareness of multiple operating systems, particularly Microsoft and Linux infrastructure and networking systems, both on-premise and in the cloud, as well as dedicated cloud services such as Microsoft 365, Azure, AWS and Google Workspace Previous use and/or knowledge of common computer forensic tools for data acquisition and analysis (for example, Logicube Falcon, Velociraptor, EnCase, FTK, Nuix, X-Ways, Axiom, IEF, Blacklight, Kali, WinFE, DEFT, Cellebrite, XRY)
The ability to use Power Shell scripting, Bash scripts, Python, SQL and data wrangling for log analysis.

Demonstrable, technical computer forensics experience/awareness of associated recognised international standards

Good understanding of best practice procedures (NPCC, NIST, ISO
17025) evidence handling, computer systems and tools of the trade

Good understanding of both the MITRE ATT&CK and Cyber Kill chain framework, network topology and EDR solutions

Preferred

Experience in performing mobile device acquisitions

Wide understanding of programming/scripting skills

Excellent presentation skills

Experience of providing client-facing communications & consultative service

Experience of writing expert reports and witness statements

Essential

Excellent written/verbal communication skills

Educated to BSc in IT or similar technical degree (or related experience)
Knowledge of Microsoft/Apple/Linux products

Awareness and understanding of computer networks and infrastructure

Preferred

Educated to BSc/MSc (or equivalent) in Computer Forensics Forensic accreditation, for example EnCE, ACE, GCFEPrevious internship or work experience in a DFIR/Security Operations role

Benefits

Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job…