Consultant, Cybersecurity

Who We Are
FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations.
At FTI Consulting, you’ll work side-by side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you’ll be an integral part of a focused team where you can make a real impact. You’ll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you.
Are you ready to make your impact?
Who We Are
FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations.
At FTI Consulting, you’ll work side-by side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you’ll be an integral part of a focused team where you can make a real impact. You’ll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you.
Are you ready to make your impact?
About The Role
Our Cybersecurity team helps clients solve complex cybersecurity challenges, including some of their most sensitive and critical incidents. Our clients include leading global brands, financial institutions, law firms and multinational corporations, for whom discretion, confidentiality and sound professional judgment are essential.
We support organizations in responding to cyber incidents, investigating security breaches, identifying threat actors and understanding the scope and impact of cyberattacks. Our work combines technical expertise in Digital Forensics and Incident Response (DFIR) with investigative skills and the ability to communicate complex technical findings clearly to clients and stakeholders.
Following a period of significant growth, FTI Consulting is continuing to expand its EMEA Cybersecurity practice. We are looking for a Consultant to join our team in Madrid, contributing to client engagements in a fast-paced, collaborative and evolving environment.
This is an opportunity to work on challenging cybersecurity investigations, develop your technical expertise and contribute to the growth of an established global consulting practice.
What You’ll Do
Support and execute cybersecurity engagements involving incident response, digital forensics and cyber investigations.
Assist in the investigation of security incidents, including ransomware attacks, data breaches, unauthorized access and suspected data exfiltration.
Acquire, preserve and analyze digital evidence from endpoints, servers, mobile devices and other relevant systems.
Conduct forensic analysis across Windows, Linux, macOS and mobile operating systems to identify indicators of compromise, reconstruct attacker activity and establish incident timelines.
Analyze endpoint, network and system artifacts to determine the nature, scope and impact of cybersecurity incidents.
Use EDR, SIEM and digital forensic tools to investigate suspicious activity, identify threats and support incident containment and remediation.
Apply established forensic methodologies and maintain appropriate evidence-handling procedures, including chain of custody.
Prepare clear, accurate and well-structured technical reports, documenting findings and translating complex technical information into actionable conclusions.
Contribute to client presentations and communicate findings and recommendations to technical and non-technical stakeholders.
Support cybersecurity assessments and the development of investigative approaches, technical methodologies and incident response procedures.
Stay up to date with emerging cyber threats, attack techniques, forensic methodologies and industry best practices.
Collaborate with colleagues across the global Cybersecurity practice and other FTI Consulting service lines.
Travel to client sites and FTI Consulting offices when required.
How You’ll Grow
We are committed to investing in your professional development and providing opportunities to strengthen your technical, analytical and consulting skills.
You will benefit from hands-on experience across a variety of cybersecurity engagements, continuous learning opportunities and support for relevant professional certifications. You will also have access to coaching and mentoring to help you develop your expertise and progress in your career.
What You Will Need to Succeed
We are looking for a technically curious and analytical professional who enjoys investigating complex problems, working with digital evidence and helping organizations respond to critical cybersecurity incidents.
You should demonstrate sound judgment, attention to detail, a structured approach to problem-solving and the ability to work effectively in a collaborative, client-facing environment.
Basic Qualifications
Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics or a related discipline, or equivalent practical experience.
Professional experience in Digital Forensics and Incident Response (DFIR), cybersecurity incident response, digital investigations or a closely related technical role.
Hands-on experience investigating and responding to cybersecurity incidents, including the identification and analysis of indicators of compromise.
Practical experience acquiring, preserving and analyzing forensic images and artifacts from Windows, Linux, macOS and/or mobile devices.
Familiarity with digital forensic and incident response tools such as FTK Imager, EnCase, Magnet AXIOM, Cellebrite and Volatility.
Experience analyzing endpoint and network telemetry using tools such as Wireshark, Splunk, ELK or similar platforms.
Familiarity with EDR solutions such as SentinelOne, CrowdStrike or Carbon Black.
Understanding of evidence preservation, forensic documentation and chain-of-custody procedures.
Knowledge of common attack techniques, threat intelligence, data exfiltration and data loss prevention concepts.
Familiarity with cybersecurity frameworks, standards and regulations such as NIST, ISO 27001 and GDPR.
Strong analytical, investigative and problem-solving skills, with the ability to document technical findings clearly.
Excellent written and verbal communication skills in English and Spanish.
Ability to work in a fast-paced, client-focused environment and manage competing priorities.
Willingness to travel when required.
Preferred Qualifications
Relevant digital forensics, incident response or cybersecurity certifications, such as GCFE, GCFA, GCIH, GNFA or equivalent.
Experience investigating ransomware incidents, business email compromise, insider threats or data breaches.
Familiarity with memory foren