Salary: £32,630 - £36,759 Location: Canary Wharf, London Hours: Full time / Flexible Working Contract: Permanent   Are you interested in developing and furthering a career within the field of digital forensics? If so, the Competition and Markets Authority (CMA) presents an exciting opportunity to work across varied and complex investigations of national importance.   The CMA is the UK’s world-leading government body established to make sure competition works in consumers’ favour and businesses treat their customers fairly. Be it taking enforcement action against drug firms accused of over-charging the NHS, investigating online ticket resale platforms over concerns they don’t give customers all the information they should or carrying out a major study into the care homes industry, what we do really matters and makes a difference to people’s lives. The opportunity We are looking for a Digital Forensics Officer to join our Enforcement Directorate to deliver a proactive and comprehensive investigative service. Reporting to a Senior Digital Forensics Officer, you will undertake a variety of digital forensics and eDiscovery tasks to support the aim of the CMA in the collection, processing and analysis of electronic evidence. This will include forensically analysing data collected from seized media (computers, laptops, mobiles, portable media etc.) and from internet and cloud based sources, in order to develop and present high quality and robust investigation reports.   About you To be successful for interview you must be able to provide evidence and examples of the following essential criteria within your online application: Experience of carrying out research and analyses to support cases. Excellent verbal and written communication skills with experience of dealing with internal and external stakeholders to provide a high-quality service. Computer literate and proficient in the use of Microsoft Office applications such as Word for report writing, Outlook for email communications, Excel for data management, PowerPoint for presentations and SharePoint for work collaboration. Knowledge of Android, Apple and Windows operating systems and how to extract data from them in a forensically sound manner. Understanding the Forensic Science Regulator's requirements as they relate to Digital Forensics; and experience in technical tool/method validation or technical quality assurance. In return, the CMA offers you a rewarding, stimulating and inclusive place to work.   We champion a culture that respects your work-life balance, provide training tailored to maximise your potential, and offer genuine opportunities for career progression.   To find out more about this opportunity and about working for the CMA, please click on the APPLY button. Closing date for applications: 11:55pm on Monday, 2 March 2020. The CMA is an accredited Disability Confident Employer and are Stonewall Diversity Champions. As an equal opportunities employer, we welcome suitably qualified applicants from all backgrounds and recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles.

Salary: £41,057 - £45,029 Location: Canary Wharf, London Hours: Full time / Flexible working Contract: Permanent The Competition and Markets Authority (CMA) presents an influential opportunity for a skilled Digital Forensic professional to work across varied and complex investigations of national importance. The CMA is the UK’s world-leading government body established to make sure competition works in consumers’ favour, and businesses treat their customers fairly. Be it taking enforcement action against drug firms accused of over-charging the NHS, investigating online ticket resale platforms over concerns they don’t give customers all the information they should, or carrying out a major study into the care homes industry, what we do really matters and makes a difference to people’s lives. The opportunity We are looking for a Senior Digital Forensics Officers to bring their expertise to the investigation, collation, processing and analysis of digital material to support the work carried out by the CMA.   The role requires you to deliver a comprehensive, professional and proactive investigative service where you will undertake a variety of digital forensics and eDiscovery tasks in the collection and analysis of electronic evidence. This is also a leadership position, where you will be responsible for managing, coaching and guiding less experienced Digital Forensics Officers, overseeing the day-to-day delivery of their work and contributions to the wider team.  About you To be successful for interview you must be able to provide evidence and examples of the following essential criteria within your online application: Experience of using knowledge and evidence to make effective decisions within the Digital Forensic strand of large investigations; specifically, in collecting electronically stored information and facilitating evidential review. Demonstrable competence in the use of Digital Forensic acquisition, analysis and review tools, in particular; Cellebrite, FTK Imager, MacQuisition, X-Ways and Nuix to produce quality evidence in a timely and efficient manner. Experience of working within, or on behalf of, a law enforcement or regulatory agency Digital Forensic team; specifically acting as the digital forensics lead in a dawn raid or similar site inspection. An excellent understanding of the FSR requirements for Digital Forensics; specifically, how they relate to the production of quality evidential products and services within the ISO 17025:2017 framework. Experience of line and/or work management responsibilities within a team delivering digital forensic casework. In return, the CMA offers you a rewarding, stimulating and inclusive place to work.   We champion a culture that respects your work-life balance, provide training tailored to maximise your potential, and offer genuine opportunities for career progression. To find out more about this opportunity and about working for the CMA, please click on the APPLY button. Closing date: 11:55pm on Monday, 2 March 2020   The CMA is an accredited Disability Confident Employer and are Stonewall Diversity Champions. As an equal opportunities employer, we welcome suitably qualified applicants from all backgrounds and recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles.

Division   The Eurofins Forensic Digital Team provides a service in the forensic examination and analysis of computer and mobile exhibits to a number of Police Forces and other Government  agencies in England and Wales.   The Role To undertake operational tasks such as the analysis of a wide range of computer systems supplied for forensic examination. Produce written reports and statements relating to this work for possible presentation in court   Key Responsibilities and Accountabilities Provide written estimates to both the prosecution and defence for the forensic examination of digital equipment. Develop examination strategies on a case-by-case basis in order to prepare outline summaries of proposed work programmes to agreed costs Organise your own day to day casework activities in order to ensure that cases are carried out efficiently, to the required standards and cost, in accordance with good work practise and quality systems. To work in accordance with best scientific and commercial practice to deliver, often complex, computer investigation related projects on time, within budget and to the appropriate quality Attend customer premises to advise and assist in seizure of equipment and on site acquisitions Oversee Research and Development work completed by other members of the team Produce appropriate reports and delivery expert evidence on findings Review of colleagues reports / statements to ensure quality and maintain standards Handle exhibits in accordance with evidential rules and technological safeguards to ensure the integrity of each case Buddy or mentor junior members of staff Provide accurate and understandable briefing / customer presentations Liaise with customers in order to keep them abreast with progression of their cases Review and keep abreast of appropriate improvements in technology. Consider areas for improvement in the role or processes that will have a positive impact on quality and effectiveness   Required Knowledge, Experience and Technical Skills Experienced Computer Investigator Educated to degree level or equivalent with recognised qualifications in computer science or computer forensic investigation. Proven track record in forensic computer investigation. Demonstrating competence and expertise from initial imaging, analysis and giving evidence in Crown Court as an Expert. Good working knowledge of a wide range of operating systems including Microsoft, Mac, Linux, experience of working with networks and also the various forensic software tools available Experience of working in a forensic environment to the highest ethical standards Good understanding of the UK legislation Excellent report writing skills Excellent knowledge of court procedure and etiquette of an expert witness, disclosure and continuity Behaviours Customer focus Able to Communicate effectively with the team and other stakeholders Proven ability of delivering results Takes accountability for actions Excellent organisational skills Ability to manage and prioritise a challenging workload Excellent attention to detail High level of commercial awareness A degree of flexibility  Due to the highly sensitive nature of the work, applicants should note that security clearance is required for this role. To gain security clearance you must have three years continuous residency in the UK. Criminal convictions may prevent you from gaining security clearance.  This role may in addition require random alcohol/drug screening.   To apply, please forward your CV to CeriWalsh@eurofins.co.uk

CYFOR is a leading nationwide provider of Digital Forensics, eDiscovery and Cyber services to Law firms, Corporate organisations and Law enforcement. The Role A fantastic opportunity has arisen for the right candidate to become the Head of Technical Operations at CYFOR As part of the Senior Management team, you will be responsible for Technical delivery and lead a highly capable and established technical team, driving continuous improvement and ensuring deadlines are achieved and client expectations met. Key to our success has been our truly exceptional technical team. As an inspirational leader, you will be responsible for coaching and mentoring these great individuals to further greatness. As well as maintaining and enhancing Quality you will lead a number of projects to achieve ISO accreditation and improve processes, policies, procedures & information systems, to create a bedrock upon which to build stable but significant growth. The ideal candidate will have at least 5 years’ experience in a Digital Forensic Environment within the Criminal or Corporate arenas, with at least 2 years in a management position. Experience of assisting in the implementation and maintenance of ISO 17025 would be desirable. In return, you’ll receive a salary commensurate with experience, training, overtime and excellent career prospects. You’ll enjoy a varied and highly fulfilling role, working with great colleagues in a fantastic atmosphere. This is a unique opportunity to join a highly successful business.   Main Responsibilities Responsible for maintaining and developing a functional and secure operations centre (includes Criminal Forensics, eDiscovery, Corporate, Cyber, IT Support) by equipping facilities and developing procedures & policies relevant to each different type of investigation; Overall responsibility for technical delivery, including quality of output, manging case workloads, ensuring deadlines are achieved and client expectations met; Lead, assist and develop members of staff with their personal and professional development through 1-1’s, appraisals and training; Responsible for Technical HR which includes recruitment, onboarding and development of all Technical staff as well as approving holidays and TOIL; Be proactive on continuous improvement by leading projects and driving improvements in technical policies, processes and procedures that improve efficiency & effectiveness; Positively contribute to SMT meetings with Cyber, eDiscovery, Criminal, Corporate and IT support dept reports and insight along with Infrastructure, Quality and ISO reports; Develop, monitor and maintain departmental KPI’s and ensure these are consistently achieved; Develop strategic initiatives to increase revenue, penetrate markets and lower costs; Where appropriate maintain and amount of time each month on chargeable client work (which includes QA); Work alongside CYFOR’s Business Development team assisting in the preparation of quotes & assist in technical queries; To assist the BD team and the reputation of CYFOR with the provision of copy for Social Media throughout the year; Proactively assist in the completion of new Customer tenders; If appropriate actively promote the company by giving presentations to external clients when necessary and leveraging contacts gained to increase revenue; Candidates will be required to travel on business from time to time. A valid passport will, therefore, be required and, ideally, a full UK driving licence.   Skills and Experience At least 5 years’ experience of working in a Digital Forensic environment within the Police or Corporate Arena’s, with at least 2 years in a management position; Consideration will also be given to experienced managers from within the Police, but not from a Digital Forensic background. Excellent leadership & people skills. Relatable, Intuitive and quickly able to gain the trust of our key asset, our colleagues. Ideally experienced in ISO17025 implementation and maintenance of ISO27001 and ISO9001. Excellent project management skills, able to demonstrate attention to detail and delivery of process improvement. Ideally experienced with implementing a new case management system. Educated to degree level or with equivalent work-related experience; Ability to communicate at all levels, adapting the style of communication to meet the needs of the audience; Ability to remain calm and controlled and maintain good performance within a mission-critical service area; Ability to effectively plan and coordinate projects; Excellent written and verbal communication skills; Ability to work in a multi-discipline team responsible for providing Forensic Services; Demonstrate a high level of accuracy and attention to detail; Demonstrate a flexible approach to work and a high level of self-motivation; Ability to exercise discretion and confidentiality; Possess excellent IT skills and demonstrate competency in a number of systems and applications.   Benefits Free parking Pension scheme Contributory Health care scheme Childcare vouchers Recognition & reward schemes Multiple Social events throughout the year including the CYFOR Family day Month-end Breakfast and lots more.   Please NOTE: This role will require security clearance to SC level, please advise if you are a holder otherwise, we will need to carry out vetting

DF/e-Discovery Analyst (experience required) Contact: Craig Johnson ( info@brimstone-consulting.com ) or (+44 (0)207 096 1200) The successful candidate will have the opportunity to learn and develop skills across the EDRM. This position is primarily based in London, however candidates may be expected to travel on occasion as some engagements can require working on client sites. Responsibilities Processing data, performing Quality Control checks, uploading to the document review platform Providing support to document reviewers Responding to clients requests escalating as required Proactively support/administrate projects Communicate with clients and senior team members/stakeholders Research new tools, techniques and workflow to help streamline the processing and review Requirements An ability to work under pressure, meet deadlines and maintain quality An ability to perform sometimes repetitive tasks, accurately and consistently A strong desire to learn and share your knowledge (training is provided) An ability to work independently and as part of a team An ability to articulate complex information clearly, in non-technical language to clients Efficient and effective time management and organisation skills Essential MS Office skills   Other desirable skills Good understanding of forensic procedures and best practices Understanding of transactional and relational databases (e.g. T-SQL, SQL, my SQL) Experience of hosted document review tools (e.g. Relativity, Nuix, Recommind, Clearwell, Ringtail etc) Understanding of the Electronic Discovery Reference Model (EDRM)   Brimstone Consulting acts as an employment agency (permanent) and as an employment business (temporary) - a free and confidential service to candidates. Brimstone Consulting is an equal opportunities employer. Due to time constraints we can only reply to applicants that match our clients’ specifications. Our Data Protection number: ZA053843  

Digital Forensics Analyst - West Midlands Contact: Craig Johnson ( info@brimstone-consulting.com ) or 0207 096 1200 This is an outstanding opportunity with a leading Consultancy to start by working on Digital Forensics Collections and Data Processing but to progress to learning all of the eDiscovery life-cycle. Ideally graduate qualified in a technical subject and with experience of 1-2 Years in: Performing data scoping working with clients and their IT team to discover and document the data. Imaging desktop and laptop computers using one or more data collection tools, e.g. EnCase, FTK, and X-Ways etc. or using other imaging tools. Extraction of data from Cloud-based systems such as Microsoft Exchange Online, Microsoft Office 365, or Google Mail.  So a knowledge of various operating systems. This work will be commercial however we will be interested to hear from Policing and MOD candidates who have had some exposure to more than dead box forensics i.e. they have worked on commercial/business systems. About Brimstone Consulting:  We specialise in finding highly qualified staff in the following areas: E-Discovery and Digital Forensics; Payments;  Fraud - (AML/CTF, Investigation, CFE’s etc.);  Risk - (Credit, Regulatory, Liquidity, Market, Analysts-SAS, SPSS etc.);  Compliance/Corporate Governance ;  IT  - (full SDLC- BA’s PM’s , Architects, Developers etc.);  Big Data and Data Analytics  - (MI/BI/CI);  InfoSec and Cyber Crime; Audit;  Accountancy and Finance Brimstone Consulting acts as an employment agency (permanent) and as an employment business (temporary) - a free and confidential service to candidates. Brimstone Consulting is an equal opportunities employer and our policies are available upon request. Due to time constraints we can only reply to applicants that match our clients’ specifications above. Our Data Protection number: ZA053843

Kivu Consulting, a leading cyber security, incident response, computer forensics, and investigations firm seeking a Senior Analyst, Digital Forensics & Incident Response. The ideal candidate will be highly organized and have 2-5 years of forensics and incident response experience and be driven to grow their existing skill set. Experience handling client/sensitive data is a significant plus as well as performing in a consultative, customer facing role. Kivu consists of security analysts who specialize in cyber security, incident response, digital forensics and risk management services. Kivu provides cyber security solutions through a combination of technical, analytical, legal services and experience. More details on the firm can be found at www.kivuconsulting.com . We are looking for a passionate Senior Analyst to take part in our growing Cyber Investigations consulting practice. The candidate will be responsible for assisting our team respond to digital forensic, incident response, and litigation needs in our clients’ information technology environments. The successful candidate must be an individual who understands digital forensic best practices and data acquisition and basic analysis to reporting. This individual must be a team player, and the ability to manage task specific roles as part of client deliverables. Computer forensic certification from an industry recognized organization and 2 to 5 years’ experience required. Well-developed written and verbal communication skills are essential to successfully translate technical concepts into reports for clients, team members and corporate leadership. Client service skills are necessary for interacting with various client personalities and changes to project scopes. Duties include: Provide immediate onsite and remote support for digital forensics, incident response, and litigation support onduct defensible data acquisitions and analysis Demonstrate skills at the identification, collection, preservation, processing of data as part of the investigation process Process collected data in various digital forensic, litigation support, and data analytics tools Work with and support case team managers Document and present findings to team and clients Build working knowledge of advanced digital forensic, incident response, and data analytics technologies Research, identify and understand new artifacts in enterprise computing environments Excel as a self-motivated individual who can work on their own as well as integrated with a team in a variety of situations Required experience: 2 – 5 years with specific technology experience in digital forensics and incident response required Preferred Skills and Qualifications: Strong verbal and written skills Experience with tools such as EnCase, FTK, Magnet Forensics, Cellebrite, and other industry tools Computer forensic certification from an industry recognized organization required Additional core competencies a plus such as data analytics and/or eDiscovery Familiarity SQL and database technologies desired Bachelor’s degree or other industry training desired The position is in any Kivu office and is full-time. Compensation will include an attractive base salary, incentive compensation, and full benefits including health and 401(k). Salary is commensurate with experience.

Kivu Consulting, a leading cyber security, incident response, computer forensics, and investigations firm seeking an Analyst, Digital Forensics & Incident Response. The ideal candidate will be highly organized and have 1-2 years of forensics and incident response experience and be driven to grow their existing skill set. Experience handling client/sensitive data is a significant plus as well as performing in a consultative, customer facing role. Kivu consists of security analysts who specialize in cyber security, incident response, digital forensics and risk management services. Kivu provides cyber security solutions through a combination of technical, analytical, legal services and experience. More details on the firm can be found at www.kivuconsulting.com . We are looking for a passionate Analyst to take part in our growing Cyber Investigations consulting practice. The candidate will be responsible for assisting our team respond to digital forensic, incident response, and litigation needs in our clients’ information technology environments. The successful candidate must be an individual who understands digital forensic best practices and data acquisition and basic analysis to reporting. This individual must be a team player, and the ability to manage task specific roles as part of client deliverables. Computer forensic certification from an industry recognized organization and 1 to 2 years’ experience required. Well-developed written and verbal communication skills are essential to successfully translate technical concepts into reports for clients, team members and corporate leadership. Client service skills are necessary for interacting with various client personalities and changes to project scopes. Duties include: Provide immediate onsite and remote support for digital forensics, incident response, and litigation support Conduct defensible data acquisitions and analysis Demonstrate skills at the identification, collection, preservation, processing of data as part of the investigation process Process collected data in various digital forensic, litigation support, and data analytics tools Work with and support case team managers Document and present findings to team and clients Build working knowledge of advanced digital forensic, incident response, and data analytics technologies Research, identify and understand new artifacts in enterprise computing environments Excel as a self-motivated individual who can work on their own as well as integrated with a team in a variety of situations Required experience: 1 – 2 years with specific technology experience in digital forensics and incident response required Preferred Skills and Qualifications: Strong verbal and written skills Experience with tools such as EnCase, FTK, Internet Evidence Finder, Nuix, Cellebrite, and other industry tools Computer forensic certification from an industry recognized organization required Additional core competencies a plus such as data analytics and/or eDiscovery Familiarity SQL and database technologies desired Bachelor’s degree or other industry training desired The position is at any Kivu office and is full-time. Compensation will include an attractive base salary, incentive compensation, and full benefits including health and 401(k). Salary is commensurate with experience.

QCC Global Ltd – Digital Forensic Analyst Vacancy   QCC Global Ltd are the world leaders in TSCM and one of the UK’s main suppliers of digital forensic services;  QCC Global Ltd has been in operation for over 20 years and continue to evolve and expand in our designated areas of expertise.  QCC operates in both the criminal and corporate environments. We have a vacancy for a dedicated digital forensic analyst at our busy Central London office and laboratory. Candidates should have a minimum of two (2) years’ experience in the field of digital forensics (computer and/or mobile based) and have hands-on working knowledge of industry standard forensic platforms.  Knowledge and exposure to ISO 17025 is also desirable. Main Responsibilities: Conduct accurate and concise digital examinations. Understand and interpret data correctly and accurately. Understand and implement evidence preservation and chain-of-custody. To fully document analysis, actions and decisions in line with ACPO guidelines and the FSR. To produce evidential reports to a high standard. To provide expert witness services. Understand and adopt security procedures to ensure exhibit integrity and company security. To self-manage workload and case management. Undertake client site operations as required. Skills and Experience: Essential University education in digital forensics field (or life-experience equivalent). Communicate clearly, concisely and authoritatively on digital forensic subjects. Understand the importance of deadlines and work towards them. Maintain a high level of accuracy and work standard. Exercise discretion and confidentiality. Be able to work in a regulated environment. Desirable Working knowledge of English law, the criminal justice system and law enforcement. Ability to problem solve and formulate plans and strategies. Be able to work productively, calmly and happily in a busy environment. Please note that applicants must successfully achieve UK SC vetting status and understand and accept that exposure to offensive material will occur.   Salary will be commensurate with experience. Company pension offered. Various company social events throughout the year

Incident Response Associate Our client is seeking to recruit an Incident Response Associate within the Cyber Security Team. This is a full-time, permanent position and the successful applicant will report directly to the Head of Incident Response. The Incident Response Associate will lead information security consultancy engagements with our client’s clients, support internal information security programs, drive new revenue and support pre-sales activity. The candidate will be experienced in responding to cyber breaches, performing forensics investigations, and assessing and planning for events. A broad knowledge of information security is essential; this must encompass a good understanding of the practical application of security technology as well as its theory. The successful candidate will have a technical engineering background with deep information security and forensics experience. Experience delivering information security consulting projects across a range of disciplines into small, medium and enterprise organizations is a must. They will also be a strong communicator who is comfortable interacting with people at all levels from the C-Suite to technical teams. MAIN DUTIES AND RESPONSIBILITIES Deliver incident response consulting to our client’s clients across a broad range of industries Perform host- and network-based cyber breach incident response investigations that include: Triage System recovery Technical evidence collection Forensics, log, malware and root cause analyses Identify attacker tools, tactics and procedures Develop incident management plans, deliver training, and conduct table-top exercises Document and maintain internal incident response policies and procedures and support the build and evolution of tools and frameworks Create client-ready documents and presentations Perform knowledge transfer across the Cyber Security Team globally Lead on cyber security pre-breach engagements, which include: Information security controls assessments Risk assessments Vulnerability assessments Regulatory and compliance assessments Develop and deliver security awareness training Contribute to marketing and business development efforts Document and maintain incident response policies and procedures Participate in an on-call rotation to provide 24X7X365 client incident coverage The role will be based in their New York City office. SKILLS, QUALIFICATIONS, & EXPERIENCE The qualifications and experience to perform this role successfully are: Bachelor’s degree in Computer Science (with a focus in security) preferred but not necessary 2-3 years of direct experience in incident response, digital forensics, malware analysis and/or security operations (SOC) 2-3 years of consulting experience or 4-5 years of experience working in a technical infrastructure role Advanced working knowledge of endpoint, memory and network forensics tools (such as FTK, Encase, Volatility, SIFT, Wireshark) Able to perform malware analysis (static and dynamic) Knowledge of at least one scripting language (like Python, Ruby, PHP or Powershell) that can be utilized to automate tasks is highly desirable Excellent writing and presentation skills with the ability to convey complex technical information clearly and concisely and tailored to any audience, including C-suite Network administration understanding to include configuration of firewalls, switches and routers is preferred Sound knowledge of security tools such as SIEM, firewalls, IDS/IPS, proxies, AV is preferred Certifications such as CREST, GNFA, GCFA, GCFE, GCIA, GCIH, GREM, CCIM, EnCE, EnCEP, ACE are highly desirable. The individual will need to have the following key personal skills and attributes to perform successfully in this role: First and foremost, must be a good team player Passionate interest in information security and dedication to continued professional development Ability to work with little oversight in a rapidly changing, unstructured environment in a small team Strong analytical and problem-solving skills Ability to thrive under pressure and work to tight deadlines Excellent verbal and written communication skills Ability to respond to incidents during non-business hours Ability to travel, including internationally Ability to work innovatively, without compromising on quality. The successful candidate must have permission to work in the United States by the start of their employment.

Company background Our client is a respected security advisory firm with a vision to create a more secure digital world by providing the highest quality incident response, risk management, and digital forensic services to clients of all sizes. Their team is comprised of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics and information security. With a highly-successful track record of delivering mission critical cybersecurity solutions, they are experienced in working quickly to provide effective incident response, attack-readiness and remediation plans with a focus on providing long term support to improve their clients’ security posture.  The Director of Digital Forensics and Incident Response will play a significant role in helping the company with their rapid growth by hiring DFIR consultants at various levels across the US, client retention and relationship building, DFIR methodology development, scoping and leading engagements, mentoring project teams, and leading organic hyper-growth efforts at the strategic leadership level. Technical Skills: 10+ years of hands-on consulting experience in digital forensics, and incident response You are an Industry-recognized inspiring leader with media and public speaking experience, deeply embedded in information security community Experience with forensic processes and procedures (chain of custody, computer acquisition techniques, and memory acquisition techniques) Maintain hyper-current knowledge of extant vulnerabilities and threat landscape Experience using forensics tools such as EnCase, FTK, SleuthKit, Volatility, etc. Analysis experience and operational understanding of one or more major operating systems (Microsoft Windows, Linux, or Mac) Knowledge of common malware persistence mechanisms Experience identifying and triaging malware Experience leading technical breach response teams in fast-paced environments   Consulting Skills: Strategic mindset but also detail-oriented and hands-on ability to lead high-level discussion on DFIR technology strategy and approach both internally and externally Demonstrated self-starter with intellectual curiosity and ability to adapt to change Ability to work quickly, willingness to work on ad hoc assignments, work independently or leading teams as needed Strong written and verbal communication skills Ability to develop unique and creative solutions to problems on the fly Willingness to learn new technologies and techniques to solve complex customer issues Ability to manage clients, lead meetings, and manage multiple project teams concurrently Ability to quickly develop and maintain rapport with clients Demonstrated ability to cross-sell or upsell existing clients and generate new business Experience managing complex budgets Ability to allocate staff to various projects quickly and efficiently Willingness to travel as required (up to 20%) to support leadership, customer briefings, planning and other activity as needed Compensation for the DFIR Director includes: Competitive salary plus quarterly bonus opportunity Company Equity Approved Certification and Training Reimbursements Open Paid Time Off Policy Medical, Dental, and Vision Benefits 401K Employer Matching Flexible work schedule

Senior Incident Response Consultant Company Background: Our client  is a respected security advisory firm with a vision to create a more secure digital world by providing the highest quality incident response, risk management, and digital forensic services to clients of all sizes.  Their team is comprised of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics and information security. With a highly-successful track record of delivering mission critical cybersecurity solutions, they are experienced in working quickly to provide effective incident response, attack-readiness and remediation plans with a focus on providing long term support to improve their clients’ security posture. Responsibilities for the Senior Incident Response Security Consultant include: Perform reactive incident response functions including but not limited to:host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs). Examine firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity. Investigate data breaches leveraging forensics tools including Encase, FTK, X-Ways, SIFT, Splunk, and custom investigation tools to determine source of compromises and malicious activity that occurred in client environments. Lead incident response engagements to guide clients through forensic investigations, contain security incidents, and provide guidance on longer term remediation recommendations. Mentorship of Incident Response Consultants in incident response and forensics best practices. Ability to perform light travel requirements as needed to meet business demands (on average 20%).   Qualifications for the Senior Incident Response Security Consultant include: 4+ years of incident response or digital forensics experience with a passion for cyber security (consulting experience preferred) Proficient with host-based forensics and data breach response Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or related field Compensation for the Incident Response Security Consultant includes: Competitive salary plus quarterly bonus opportunity Company Equity Approved Certification and Training Reimbursements Open Paid Time Off Policy Medical, Dental, and Vision Benefits 401k Employer Matching Flexible work schedule

CYFOR is a leading nationwide provider of Digital Forensics, eDiscovery and Cyber services to Law firms, Corporate organisations   and Law enforcement   The Role Due to our continued growth, we are looking for Senior Digital Forensic Investigators. The ideal candidates will have at least 2 years’ experience carrying out digital forensic casework within the Criminal or Corporate arenas and be able to demonstrate time management, flexibility, commitment and integrity. In return, you’ll receive a salary commensurate with experience, overtime beyond the 37.5 hour working week and excellent career prospects. You’ll enjoy a varied and highly fulfilling role seeing cases through from start to finish. This is a unique opportunity to join a highly successful business that focuses on its main asset, its team members.   Main Responsibilities Conduct forensically sound acquisitions, analysis and examinations of computer systems and associated media, either on-site or in the lab, ensuring continuity of all exhibits and maintaining integrity throughout; Secure and retrieve data from computer systems in accordance with ACPO guidelines, utilising proprietary and bespoke software, in order to preserve evidence gathered during the course of investigations; To record the details of analysis and investigations undertaken and maintain the confidentiality of this information; To liaise with other bodies or agencies as and when required; To ensure the work meets quality standards in providing a service to all clients; to report or escalate issues, as appropriate, to the Head of Investigations; Assist with the implementation and maintenance of IS0 9001, ISO 27001 and ISO 17025 standards; Prepare detailed reports, Criminal Justice Act statements and exhibits to a standard suitable for use in criminal or civil court in support of these investigations; To present evidence in court in a clear and comprehensive manner; To ensure that appropriate security and access control of forensic tools, systems and evidence is maintained at all times; To develop experience and detailed technical knowledge of current technology and the wide variety of tools and techniques used to assist in the acquisition and analysis of evidence and the identification and recovery of data; Attend seminars and classes for training in specialised forensic software applications, forensic analysis techniques and other specialized areas; To assist in the training and development of any investigator or technician, when required to do so; Assist the Business Development to quote for new cases by previewing case objectives; Remain current on laws and procedures required for processing search and seize orders; Conduct and assist on complex cases beyond the competency of junior investigators; Work with Head of Investigations to determine the best forensic analysis strategy required; To maintain professional liaison and membership in professional organisations for cross-feed of technical information; Candidates will be required to travel on business from time to time. A valid passport will, therefore, be required and, ideally, a full UK driving licence.     Skills and Experience At least two years’ experience of undertaking digital forensic analysis of computers and mobile devices for Criminal or Corporate cases Educated to degree level or with equivalent work-related experience. Ability to communicate at all levels, adapting the style of communication to meet the needs of the audience. Ability to remain calm and controlled and maintain good performance within a mission critical service area. Ability to effectively plan and coordinate projects. Excellent written and verbal communication skills. Ability to work in a multi-discipline team responsible for providing Forensic Services. Demonstrate a high level of accuracy and attention to detail. Ability to absorb, understand and apply new Forensic Science Regulatory requirements Demonstrate a flexible approach to work and a high level of self-motivation. Ability to exercise discretion and confidentiality. Possess excellent IT skills and demonstrate competency in a number of systems and applications.     Benefits Free parking Pension scheme Contributory health care scheme Childcare vouchers Recognition & reward schemes Multiple social events throughout the year including the CYFOR Family day Month-end breakfast and lots more   Please Note: This role will require security clearance to SC level, please advise if you are a holder otherwise, we will need to carry out vetting.