Security Specialist – Incident Commander (DFIR)

The Role

This position leads the response to high-severity cybersecurity incidents across a large global organisation, coordinating across security operations, IT, legal, and production teams. Day-to-day work spans active incident management, digital forensic investigations, threat hunting, post-incident reporting, and running simulation exercises to strengthen response capabilities.

Skills & Experience

Candidates should bring hands-on experience coordinating complex incident response and conducting forensic investigations covering memory, disk, and network artefacts. Proficiency with tools such as Velociraptor and Autopsy is expected. The ability to communicate findings clearly to both technical and non-technical stakeholders, including legal and privacy teams, is essential.

Who It Suits

This role suits an experienced DFIR professional who is comfortable leading under pressure and influencing across diverse teams. Those who enjoy mentoring colleagues, driving process improvement, and operating within a large, fast-moving environment spanning global infrastructure and live digital services will find this particularly rewarding.