Engineer, Cybersecurity DFIR

The Role

This position sits within a cybersecurity DFIR team defending critical financial infrastructure against global threats. Day to day, the engineer handles security analytics, incident detection and investigation, endpoint forensics, threat hunting, intrusion detection, and the design of preventative and corrective countermeasures against emerging adversaries.

Skills & Experience

Candidates need at least three years of relevant experience, a degree in a related discipline, and hands-on proficiency with both Windows and Linux environments. A deep understanding of networking principles is essential, alongside the ability to analyse forensic artefacts, tune detection capabilities, and distil actionable insight from large datasets.

Who It Suits

This role suits a technically rigorous and tenacious security professional who thrives in fast-paced, high-stakes environments. Someone equally comfortable conducting proactive threat hunts, building behavioural anomaly criteria for insider threat detection, and communicating findings clearly to stakeholders will excel here.