Senior DFIR Investigator

The Role

This position sits within a global security services team, leading end-to-end forensic investigations across host, network and cloud environments. Day to day, the role involves analysing threat actor activity, producing detailed forensic reports and timelines, guiding clients through the incident response lifecycle, and delivering proactive services such as tabletop exercises and training workshops.

Skills & Experience

Candidates require a strong technical background in digital forensics and incident response, with demonstrable experience leading complex investigations. Expertise in forensic evidence collection and preservation, malware analysis, cloud environments and incident response tooling is expected, alongside the ability to assess data exposure and produce clear, actionable client-facing documentation.

Who It Suits

This role suits an experienced DFIR professional ready to take ownership of high-stakes investigations and lead smaller investigation teams. Someone who thrives under pressure, communicates confidently with diverse stakeholders including legal and technical audiences, and is passionate about mentoring junior colleagues and staying current with the evolving threat landscape will excel here.