Associate Director, Incident Response and Forensics

The Role

This position leads a global team of digital forensics, incident response, and eDiscovery analysts, overseeing the full incident response lifecycle from preparation through recovery. Day-to-day responsibilities include forensic analysis of operating systems, network traffic examination, IOC derivation, malware analysis, and close collaboration with Security Operations and Threat Intelligence.

Skills & Experience

Candidates should bring deep expertise in DFIR, including malware analysis, threat detection, and network protocol analysis. Experience directing tool adoption, developing team capability maturity programmes, and deriving Indicators of Compromise is essential. Familiarity with common attack techniques and eDiscovery processes is expected at this senior level.

Who It Suits

This role suits a technically strong, detail-oriented security leader who thrives in fast-paced environments and is comfortable owning both strategy and hands-on forensic work. Someone with a proven track record of managing global teams and building cross-functional partnerships within a large enterprise will excel here.