> Markdown version of [/jobs/ext/3561800-dutch-digital-forensics-and-incident-response-dfir-consultant](https://www.wearedevelopers.com/jobs/ext/3561800-dutch-digital-forensics-and-incident-response-dfir-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Dutch Digital Forensics and Incident Response (DFIR) Consultant

- **Company:** Cypfer
- **Location:** Utrecht, Netherlands
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Data Analysis, Cyber Security, Digital Forensics, RAID, Security Information and Event Management, Malware, Cyber Threat Analysis, Storage Technologies
- **Published:** October 3, 2026
- **Apply:** https://www.adzuna.nl/details/5328171959

## About the Role

* Bilingual English and Dutch

 * 2+ years of experience in digital forensics, incident response, or a similar role.

 * Knowledge of Windows and Unix/Linux operating systems.

 * Understanding of the functionality of EDR / EPP technologies.

 * Familiarity with forensic acquisition and analysis of physical and virtual systems.

 * Working knowledge of storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS.

 * Ability to analyze and interpret logs from various sources.

 * Ability to perform threat research and analyze current threats.

 * Understanding of business email compromise (BEC) cases and investigation techniques.

 * Participate in a rotating on-call schedule; ability to work on weekends and outside normal business hours as needed.

 * This role is remote but requires the ability to travel on short notice to a client site up to 50%. Must maintain flexibility to travel frequently within 24-48 hours' notice for deployments typically 1-2 weeks in duration.

Business Responsibilities:

 * Maintain current knowledge of information security, incident response techniques, emerging threats, and tools.

 * Work independently and produce high-quality deliverables with minimal supervision.

 * Exhibit strong customer service and consulting skills.

 * Adhere to client and internal policies, procedures, and security practices.

 * Maintain detailed notes and draft updates and reports as required.

 * Remain calm, composed, and articulate in tough customer situations.

 * Exhibit excellent relationship management and communication skills.

Preferred Skills:

 * Understand obfuscation techniques used to conceal malicious commands and traffic, and lateral movement strategies employed by threat actors.

 * Familiarity with exfiltration techniques used by threat actors.

 * Knowledge of SIEM and SOAR solutions.

 * Experience with e-discovery tools and methodologies.

 * Proficiency in collecting and analyzing data from mobile devices/cell phones.

 * Industry certifications such as MCFE, ENCE, ACE, GCFA, GCIH, GNFA, GCFE or similar are a plus.

## Description

* Engage on behalf of CYPFER in incident response tasks, interacting with various insurance partners, legal counsel, incident response units, client executives, and technical teams.

 * Utilize standard tools and methodologies to collect forensic artifacts and images from affected systems.

 * Assist with Windows forensics and triage to assess compromise and investigations.

 * Familiarity with malware analysis tools and methodologies.

 * Apply mitigation strategies and concepts to remediate identified threats.

 * Analyze triage collections/artifacts for indicators of compromise (IOCs) and potentially malicious activity.

 * Review logs from host systems and appliances to identify suspicious activities.

 * Collect forensic disk and memory images from physical and virtual endpoints and servers.

 * Understanding of an incident lifecycle and cyber-kill-chain.

 * Correlate events and build timelines of events.

 * Maintain current knowledge on emerging threats and vulnerabilities.

 * Analyze files for IOCs using various techniques.