Engineering and Forensics Engineer

The Role

This role involves analysing endpoint artifacts, authentication events, filesystem data, and system logs across Windows and Linux environments to detect anomalous or malicious behaviour. It includes using EDR and forensic-triage tools, assessing indicators of compromise, and documenting findings in detailed investigation reports.

Skills & Experience

Candidates need 3+ years performing forensic analysis including disk, memory and timeline analysis, plus experience with EDR tools, malware triage, and mapping activity to the Cyber Kill Chain. Strong written communication and case documentation skills are essential, alongside the ability to review others’ investigations.

Who It Suits

Suited to experienced digital forensics or incident response practitioners comfortable working within a large consulting environment, supporting government clients, and able to work both independently and collaboratively within structured case-management processes.