Digital Forensics and Incident Response (DFIR) Specialist

The Role

This senior position involves leading end-to-end forensic investigations and incident response engagements across endpoints, networks, cloud, and mobile environments. Day-to-day work includes evidence acquisition, malware analysis, threat hunting, containment support, and producing clear technical and executive-level reports for stakeholders.

Skills & Experience

Candidates should bring five to eight years of hands-on DFIR experience, including disk and memory forensics, log analysis, static and dynamic malware analysis, and IOC extraction. Familiarity with cloud and hybrid environments is expected, along with strong chain-of-custody practices and the ability to develop playbooks and SOPs.

Who It Suits

This role suits an experienced forensic practitioner who is comfortable operating independently in senior technical capacity, thrives during active incidents such as ransomware or APT intrusions, and can communicate complex findings clearly to both technical teams and non-technical leadership.