Principal Consultant, Digital Forensics & Incident Response

Overview

In this role, you lead high-stakes digital forensics and incident response engagements across the EMEA region, acting as a crisis commander for severe cyber intrusions. You serve as a trusted advisor to enterprise customers, translating findings into practical defense improvements and executive briefings. You’ll blend technical DFIR leadership with pre-sales and cross-tower collaboration to drive resilience and growth for key accounts. This role offers the chance to influence enterprise security posture at scale within Verizon’s V Team culture.

Pay / Benefits

• competitive salaries and performance-based incentives
• health and wellbeing resources
• paid time off and flexible working arrangements
• training and development opportunities
• education assistance funding
• volunteering opportunities

Responsibilities

• Lead complex, large-scale digital forensic investigations ensuring evidence integrity and court-admissible deliverables
• Conduct IR Capability Assessments (IRCA) and develop IR plans (IRPD) using NIST/SANS frameworks
• Serve as DFIR liaison and customer success lead for critical enterprise accounts across the Rapid Response Retainer lifecycle
• Guide pre-sales engagements, scope opportunities, and develop cross-tower RFP solutions
• Provide technical thought leadership through white papers, webinars, and industry events, and mentor EMEA VTRAC consultants

Key requirements

• Bachelor’s degree or relevant work experience
• Strong DFIR, computer forensics, ICS/IoT/eDiscovery experience
• Experience with at least two of Windows, Linux, Unix, macOS
• Experience consulting enterprise customers in a DFIR capacity
• Ability to manage confidential information and operate in a dynamic environment
• Willingness to travel on short notice and participate in 24/7 incident response when required
• Fluency in English, written and spoken
• Valid UK Driver’s License

• Executive relationship building
• strong communication with C-suite and board-level stakeholders
• team player with leadership presence
• DFIR methodologies and incident response practices
• Cloud incident response (AWS, GCP, Azure)
• EDR tools (CrowdStrike, Defender, SentinelOne)

…