Digital Forensics Lead

The Role

This position leads digital forensics and insider-threat investigations within a 24/7 cybersecurity operations centre, overseeing evidence handling, chain-of-custody procedures, endpoint and network forensic analysis, and malware triage, while maintaining SIEM dashboards, incident response documentation, and mentoring junior team members.

Skills & Experience

Candidates must hold an active Top Secret clearance with SCI eligibility, a bachelor’s degree in a STEM or cybersecurity-related discipline, and at least seven years of professional experience in incident response or digital forensics, including hands-on expertise with endpoint forensics, network analysis, malware triage, and SIEM platforms.

Who It Suits

This role suits an experienced forensics professional comfortable operating in a fast-paced, mission-critical government environment who combines strong technical depth with the leadership capability to guide investigations, uphold rigorous evidentiary standards, and develop less experienced analysts within a structured SOC team.