Senior Forensic Analyst

The Role

This senior-level position leads forensic analysis across multiple concurrent engagements, supporting ransomware and cyber intrusion investigations. Day-to-day responsibilities include triage and advanced examination of OS artifacts, memory, network logs and EDR telemetry, developing attack timelines using MITRE ATT&CK and Cyber Kill Chain, and drafting peer-reviewed investigative reports for counsel and insurance carriers.

Skills & Experience

Candidates must demonstrate strong proficiency in Windows, Linux and macOS disk and memory forensics, log analysis, and network security monitoring. Hands-on experience with tools such as EnCase, FTK, Axiom, X-Ways, Volatility, Splunk and Wireshark is required, alongside certifications including GCFA, GCFE, GCIH, EnCE, CHFI or equivalent. A relevant degree and 4+ years of DFIR experience are expected.

Who It Suits

This role suits an experienced forensic analyst ready to take a leading technical position within a fast-paced incident response team. Those with a background in cyber insurance investigations, comfort briefing non-technical audiences, and the ability to manage timelines and mentor junior analysts will thrive here.