Lead Security Analyst (Digital Forensics and Incident Response))

The Role

This position leads digital forensic investigations spanning cybersecurity incidents, insider threats, HR matters and legal requests. Responsibilities include forensic acquisition and analysis of endpoints, cloud workloads, network data and volatile memory, plus developing playbooks, automation and defensible forensic reports.

Skills & Experience

Requires 7+ years in DFIR, including senior leadership experience, scripting (Python/PowerShell), and tools such as Magnet, EnCase, Volatility, FTK, KAPE, Autopsy and Velociraptor. Cloud forensics (AWS/Azure), EDR/SIEM/SOAR platforms, malware analysis and strong evidence handling practices are essential.

Who It Suits

Ideal for an experienced forensic investigator ready to take a technical leadership role, mentor junior analysts, and work cross-functionally with legal, HR and security teams on high-priority, sensitive investigations.