Experteer Overview
In this role, you will support and execute cybersecurity engagements focused on incident response, digital forensics and investigations. You will work with global clients to investigate incidents, preserve and analyze digital evidence, and communicate findings clearly to technical and non-technical stakeholders. You will develop forensic methodologies, apply common frameworks, and help shape investigative approaches. You will join a fast-paced, collaborative team in Madrid that values continuous learning and professional growth, contributing to a leading global cyber practice.

Compensaciones / Beneficios
• Support and execute cybersecurity engagements involving incident response, digital forensics and cyber investigations
• Assist in the investigation of security incidents including ransomware, data breaches, unauthorized access and data exfiltration
• Acquire, preserve and analyze digital evidence from endpoints, servers and mobile devices
• Conduct forensic analysis across Windows, Linux, macOS and mobile OS to identify IOC and reconstruct attacker activity
• Analyze endpoint, network and system artifacts to determine nature, scope and impact of incidents
• Use EDR, SIEM and digital forensic tools to investigate suspicious activity and support containment and remediation
• Maintain evidence-handling procedures including chain of custody
• Prepare clear technical reports and translate findings for stakeholders
• Contribute to client presentations and communicate recommendations to technical and non-technical audiences




• Support cybersecurity assessments and development of investigative methodologies and incident response procedures
• Stay up to date with emerging threats, methodologies and best practices
• Collaborate with colleagues across the global Cybersecurity practice and other service lines
• Travel to client sites and offices when required

Responsabilidades
• Bachelor's degree in related field or equivalent practical experience
• Experience in Digital Forensics and Incident Response (DFIR)
• Hands-on experience investigating and responding to cybersecurity incidents
• Experience acquiring and analyzing forensic images from Windows, Linux, macOS or mobile devices
• Familiarity with forensic and IR tools: FTK Imager, EnCase, Magnet AXIOM, Cellebrite, Volatility
• Experience analyzing endpoint and network telemetry with Wireshark, Splunk, ELK
• Familiarity with EDR tools such as SentinelOne, CrowdStrike or Carbon Black
• Understanding of evidence preservation and chain-of-custody
• Knowledge of attack techniques, threat intelligence, data exfiltration and DLP concepts
• Familiarity with NIST, ISO 27001 and GDPR
• Strong analytical, investigative and reporting skills
• Excellent written and verbal English and Spanish
• Ability to work in a fast-paced, client-focused environment and travel
• Willingness to travel as required

Requisitos principales
• pension
• adaptable benefits
• health options
• wellness programs
• professional development
• flexible/hybrid working arrangements

📌 Consultant, Cybersecurity (Madrid)
🏢 Fti Consulting
📍 Madrid